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Abstract 

This chapter presents an overview of computability logic — the game-semantically constructed logic 
of interactive computational tasks and resources. There is only one non-overview, technical section in it, 
devoted to a proof of the soundness of affine logic with respect to the semantics of computabilitv logic. 

Invited book chapter to appear in Games: Unifying Logic, Language and Philosophy. O. Majer, 
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1 Introduction 



In the beginning was Semantics, and Semantics was Game Semantics, and Game Semantics was Logic. 1 
Through it all concepts were conceived; for it all axioms are written, and to it all deductive systems should 
serve... 

This is not an evangelical story, but the story and philosophy of computability logic (CL), the recently 
introduced [12] mini-religion within logic. According to its philosophy, syntax — the study of axiomatizations 
or any other, deductive or nondcductive string-manipulation systems — exclusively owes its right on existence 
to semantics, and is thus secondary to it. CL believes that logic is meant to be the most basic, general- 
purpose formal tool potentially usable by intelligent agents in successfully navigating the real life. And it is 
semantics that establishes that ultimate real-life meaning of logic. Syntax is important, yet it is so not in its 
own right but only as much as it serves a meaningful semantics, allowing us to realize the potential of that 
semantics in some systematic and perhaps convenient or efficient way. Not passing the test for soundness with 
respect to the underlying semantics would fully disqualify any syntax, no matter how otherwise appealing 
it is. Note — disqualify the syntax and not the semantics. Why this is so hardly requires any explanation: 
relying on an unsound syntax might result in wrong beliefs, misdiagnosed patients or crashed spaceships. 

Unlike soundness, completeness is a desirable but not necessary condition. Sometimes — as, say, in 
the case of pure second-order logic, or first-order applied number theory with + and x completeness is 
impossible to achieve in principle. In such cases we may still benefit from continuing working with various 
reasonably strong syntactic constructions. A good example of such a "reasonable" yet incomplete syntax 
is Peano arithmetic. Another example, as we are going to see later, is affine logic, which turns out to be 
sound but incomplete with respect to the semantics of CL. And even when complete axiomatizations are 
known, it is not fully unusual for them to be sometimes artificially downsized and made incomplete for 
efficiency, simplicity, convenience or even esthetic considerations. Ample examples of this can be found 
in applied computer science. But again, while there might be meaningful trade-offs between (the degrees 
of) completeness, efficiency and other desirable-but-not-necessary properties of a syntax, the underlying 
semantics remains untouchable, and the condition of soundness unnegotiable. It is that very untouchable 
core that should be the point of departure for logic as a fundamental science. 

A separate question, of course, is what counts as a semantics. The model example of a semantics with 
a capital 'S' is that of classical logic. But in the logical literature this term often has a more generous 
meaning than what CL is ready to settle for. As pointed out, CL views logic as a universal-utility tool. So, a 
capital-'S'-semantics should be non-specific enough, and applicable to the world in general rather than some 
very special and artificially selected (worse yet, artificially created) fragment of it. Often what is called a 
semantics is just a special-purpose apparatus designed to help analyze a given syntactic construction rather 
than understand and navigate the outside world. The usage of Kripke models as a derivability test for 
intuitionistic formulas, or as a validity criterion in various systems of modal logic is an example. An attempt 
to see more than a technical, syntax-serving instrument (which, as such, may be indeed very important 
and useful) in this type of lowercase 's' semantics might create a vicious circle: a deductive system L under 
question is "right" because it derives exactly the formulas that are valid in a such and such Kripke semantics; 
and then it turns out that the reason why we are considering the such and such Kripke semantics is that ... 
it validates exactly what L derives. 

This was about why in the beginning was Semantics. Now a few words about why Semantics was Game 
Semantics. For CL, game is not just a game. It is a foundational mathematical concept on which a powerful 
enough logic (=semantics) should be based. This is so because, as noted, CL sees logic as a "real-life 
navigational tool" , and it is games that appear to offer the most comprehensive, coherent, natural, adequate 
and convenient mathematical models for the very essence of all "navigational" activities of agents: their 
interactions with the surrounding world. An agent and its environment translate into game-theoretic terms 
as two players; their actions as moves; situations arising in the course of interaction as positions; and success 
or failure as wins or losses. 

It is natural to require that the interaction strategies of the party that we have referred to as an "agent" be 
limited to algorithmic ones, allowing us to henceforth call that player a machine. This is a minimum condition 

1 'In the beginning was the Word, and the Word was with God, and the Word was God... Through him all things were made; 
without him nothing was made that has been made.' — John's Gospel. 
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that any non-esoteric game semantics would have to satisfy. On the other hand, no restrictions can or should 
be imposed on the environment, who represents 'the blind forces of nature, or the devil himself ([12]). 
Algorithmic activities being synonymous to computations, games thus represent computational problems — 
interactive tasks performed by computing agents, with computability meaning winnability, i.e. existence of 
a machine that wins the game against any possible (behavior of the) environment. 

In the 1930s mankind came up with what has been perceived as an ultimate mathematical definition 
of the precise meaning of algorithmic solvability. Curiously or not, such a definition was set forth and 
embraced before really having attempted to answer the seemingly more basic question about what com- 
putational problems are — the very entities that may or may not have algorithmic solutions in the first 
place. The tradition established since then in theoretical computer science by computability simply means 
Turing computability of functions, as the task performed by every Turing machine is nothing but receiving 
an input x and generating the output f(x) for some function /. Turing [34] himself, however, was more 
cautious about making overly broad philosophical conclusions, acknowledging that not everything one would 
potentially call a computational problem might necessarily be a function, or reducible to such. Most tasks 
that computers and computer networks perform are interactive. And nowadays more and more voices are 
being heard [8, 15, 30, 36] pointing out that true interaction might be going beyond what functions and 
hence ordinary Turing machines are meant to capture. 

Two main concepts on which the semantics of CL is based are those of static games and their winnability 
(defined later in Sections 5 and 6). Correspondingly, the philosophy of CL relies on two beliefs that, together, 
present what can be considered an interactive version of the Church- Turing thesis: 

Belief 1. The concept of static games is an adequate formal counterpart of our intuition of ( "pure", 
speed-independent) interactive computational problems. 

Belief 2. The concept of winnability is an adequate formal counterpart of our intuition of algorithmic 
solvability of such problems. 

As will be seen later, one of the main features distinguishing the CL games from more traditional game 
models is the absence of procedural rules ([2]) — rules strictly regulating which player is to move in any given 
situation. Here, in a general case, either player is free to move. It is exactly this feature that makes players' 
strategies no longer definable as functions (functions from positions to moves). And it is this highly relaxed 
nature that makes the CL games apparently most flexible and general of all two-player, two-outcome games. 

Trying to understand strategies as functions would not be a good idea even if the type of games we 
consider naturally allowed us to do so. Because, when it comes to long or infinite games, functional strategies 
would be disastrously inefficient, making it hardly possible to develop any reasonable complexity theory for 
interactive computation (the next important frontier for CL or theoretical computer science in general). To 
understand this, it would be sufficient to just reflect on the behavior of one's personal computer. The job 
of your computer is to play one long — potentially infinite — game against you. Now, have you noticed 
your faithful servant getting slower every time you use it? Probably not. That is because the computer is 
smart enough to follow a non-functional strategy in this game. If its strategy was a function from positions 
(interaction histories) to moves, the response time would inevitably keep worsening due to the need to read 
the entire — continuously lengthening and, in fact, practically infinite — interaction history every time 
before responding. Defining strategies as functions of only the latest moves (rather than entire interaction 
histories) in Abramsky and Jagadeesan's [1] tradition is also not a way out, as typically more than just the 
last move matters. Back to your personal computer, its actions certainly depend on more than your last 
keystroke. 

Computability in the traditional Church- Turing sense is a special case of winnability — winnability 
restricted to two-step (input /output, question/answer) interactive problems. So is the classical concept of 
truth, which is nothing but winnability restricted to propositions, viewed by CL as zero-step problems, i.e. 
games with no moves that are automatically won or lost depending on whether they are true or false. This 
way, the semantics of CL is a generalization, refinement and conservative extension of that of classical logic. 

Thinking of a human user in the role of the environment, computational problems are synonymous 
to computational tasks — tasks performed by a machine for the user /environment. What is a task for 
a machine is then a resource for the environment, and vice versa. So the CL games, at the same time, 
formalize our intuition of computational resources. Logical operators are understood as operations on such 
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tasks/ resources/games, atoms as variables ranging over tasks/resources/games, and validity of a logical 
formula as being "always winnable" , i.e. as existence — under every particular interpretation of atoms — 
of a machine that successfully accomplishes/provides/ wins the corresponding task/resource/game no matter 
how the environment behaves. With this semantics, 'computability logic is a formal theory of computability 
in the same sense as classical logic is a formal theory of truth' ([13]). Furthermore, as mentioned, the 
classical concept of truth is a special case of winnability, which eventually translates into classical logic's 
being nothing but a special fragment of computability logic. 

CL is a semantically constructed logic and, at this young age, its syntax is only just starting to develop, 
with open problems and unverified conjecture prevailing over answered questions. In a sense, this situation 
is opposite to the case with some other non-classical traditions such as intuitionistic or linear logics where, 
as most logicians would probably agree, "in the beginning was Syntax", and really good formal semantics 
convincingly justifying the proposed syntactic constructions are still being looked for. In fact, the semantics 
of CL can be seen to be providing such a justification, although, at least for linear logic, this is only in a 
limited sense explained below. 

The set of valid formulas in a certain fragment of the otherwise more expressive language of CL forms a 
logic that is similar to but by no means the same as linear logic. The two logics typically agree on short and 
simple formulas (perhaps with the exception for those involving exponentials, where disagreements may start 
already on some rather short formulas). For instance, both logics reject P — > P A P and accept P->PnF, 
with classical-shape propositional connectives here and later understood as the corresponding multiplicative 
operators of linear logic, and square-shape operators as additives (n="with", U="plus"). Similarly, both 
logics reject P U ^P and accept P V -P. On the other hand, CL disagrees with linear logic on many more 
evolved formulas. E.g., CL validates the following two principles rejected even by affine logic AL — linear 
logic with the weakening rule: 

((P A Q) V (R A S)) -» ((P V R) A (Q V S))\ 

(P a (R n S)) n (Q a (P n S)) n ((P n Q) a r) n ((P n Q) a S) -> (P n Q) a (R n S). 

Neither the similarities nor the discrepancies are a surprise. The philosophies of CL and linear logic 
overlap in their striving to develop a logic of resources. But the ways this philosophy is materialized are 
rather different. CL starts with a mathematically strict and intuitively convincing semantics, and only after 
that, as a natural second step, asks what the corresponding logic and its possible axiomatizations arc. On 
the other hand, it would be accurate to say that linear logic started directly from the second step. Even 
though certain companion semantics were provided for it from the very beginning, those are not quite what 
we earlier agreed to call capital-'S'. As a formal theory of resources (rather than that of phases or coherent 
spaces), linear logic has been motivated and introduced syntactically rather than semantically, essentially by 
taking classical sequent calculus and deleting the rules that seemed unacceptable from a certain intuitive, 
naive resource point of view. Hence, in the absence of a clear formal concept of resource-semantical truth 
or validity, the question about whether the resulting system was complete could not even be meaningfully 
asked. In this process of syntactically rewriting classical logic some innocent, deeply hidden principles could 
have easily gotten victimized. CL believes that this is exactly what happened, with the above-displayed 
formulas separating it from linear logic — and more such formulas to be seen later — viewed as babies 
thrown out with the bath water. Of course, many retroactive attempts have been made to find semantical 
(often game-semantical) justifications for linear logic. Technically it is always possible to come up with some 
sort of a formal semantics that matches a given target syntactic construction, but the whole question is 
how natural and meaningful such a semantics is in its own rights, and how adequately it corresponds to 
the logic's underlying philosophy and ambitions. 'Unless, by good luck, the target system really is "the 
right logic" , the chances of a decisive success when following the odd scheme from syntax to semantics could 
be rather slim' ([12]). The natural scheme is from semantics to syntax. It matches the way classical logic 
evolved and climaxed in Godel's completeness theorem. And, as we now know, this is exactly the scheme 
that computability logic, too, follows. 

Intuitionistic logic is another example of a syntactically conceived logic. Despite decades of efforts, no fully 
convincing semantics has been found for it. Lorenzen's game semantics [5, 29], which has a concept of validity 
without having a concept of truth, has been perceived as a technical supplement to the existing syntax rather 
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than as having independent importance. Some other semantics, such as Kleene's realizability [25] or Godel's 
Dialectica interpretation [7], are closer to what we might qualify as capital-'S'. But, unfortunately, they 
validate certain principles unnegotiably rejected by intuitionistic logic. From our perspective, the situation 
here is much better than with linear logic though. In [19], Heyting's first-order intuitionistic calculus has 
been shown to be sound with respect to the CL semantics. And the propositional fragment of Heyting's 
calculus has also been shown to be complete ([20, 21, 22, 35]). This signifies success — at least at the 
propositional level — in semantically justifying intuitionistic logic, and a materialization of Kolmogorov's 
[26] well known yet so far rather abstract thesis according to which intuitionistic logic is a logic of problems. 
Just as the resource philosophy of CL overlaps with that of linear logic, so does its algorithmic philosophy 
with the constructivistic philosophy of intuitionism. The difference, again, is in the ways this philosophy 
is materialized. Intuitionistic logic has come up with a "constructive syntax" without having an adequate 
underlying formal semantics, such as a clear concept of truth in some constructive sense. This sort of a 
syntax was essentially obtained from the classical one by banning the offending law of the excluded middle. 
But, as in the case of linear logic, the critical question immediately springs out: where is a guarantee that 
together with excluded middle some innocent principles would not be expelled as well? The constructivistic 
claims of CL, on the other hand, are based on the fact that it defines truth as algorithmic solvability. The 
philosophy of CL does not find the term constructive syntax meaningful unless it is understood as soundness 
with respect to some constructive semantics, for only a semantics may or may not be constructive in a 
reasonable sense. The reason for the failure of P U —<P in CL is not that this principle ... is not included 
in its axioms. Rather, the failure of this principle is exactly the reason why this principle, or anything else 
entailing it, would not be among the axioms of a sound system for CL. Here "failure" has a precise semantical 
meaning. It is non-validity, i.e. existence of a problem A for which A U —>A is not algorithmically solvable. 

It is also worth noting that, while intuitionistic logic irreconcilably defies classical logic, computability 
logic comes up with a peaceful solution acceptable for everyone. The key is the expressiveness of its lan- 
guage, that has (at least) two versions for each traditionally controversial logical operator, and particularly 
the two versions V and U of disjunction. As will be seen later, the semantical meaning of V conservatively 
extends — from moveless games to all games — its classical meaning, and the principle P V ->P survives 
as it represents an always-algorithmically-solvable combination of problems, even if solvable in a sense that 
some constructivistically-minded might fail — or pretend to fail — to understand. And the semantics of 
U, on the other hand, formalizes and conservatively extends a different, stronger meaning which apparently 
every constructivist associates with disjunction. As expected, then P U ->P turns out to be semantically 
invalid. CL's proposal for settlement between classical and constructivistic logics then reads: 'If you are 
open (=classically) minded, take advantage of the full expressive power of CL; and if you are constructivis- 
tically minded, just identify a collection of the operators whose meanings seem constructive enough to you, 
mechanically disregard everything containing the other operators, and put an end to those fruitless fights 
about what deductive methods or principles should be considered right and what should be deemed wrong' 
([12])- 

Back to linear — more precisely, affine — logic. As mentioned, AL is sound with respect to the CL 
semantics, a proof of which is the main new technical contribution of the present paper. This is definitely 
good news from the "better something than nothing" standpoint. AL is simple and, even though incomplete, 
still reasonably strong. What is worth noting is that our soundness proof for AL, just as all other soundness 
proofs known so far in CL, including that for the intuitionistic fragment ([19]), or the CL4 fragment ([18]) 
that will be discussed in Section 9, is constructive. This is in the sense that, whenever a formula F is 
provable in a given deductive system, an algorithmic solution for the problem(s) represented by F can be 
automatically extracted from the proof of F. The persistence of this phenomenon for various fragments of 
CL carries another piece of good news: CL provides a systematic answer not only to the theoretical question 
"what can be computed?" but, as it happens, also to the more terrestrial question "how can be computed?". 

The main practical import of the constructive soundness result for AL (just as for any other sublogic of 
CL) is related to the potential of basing applied theories or knowledge base systems on that logic, the latter 
being a reasonable, computationally meaningful alternative to classical logic. The non-logical axioms — or 
knowledge base — of an AL-based applied system/theory would be any collection of (formulas representing) 
problems whose algorithmic solutions are known. Then our soundness result for AL guarantees that every 
theorem T of the theory also has an algorithmic solution and that, furthermore, such a solution, itself, can 
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be effectively constructed from a proof of T. This makes AL a systematic problem-solving tool: finding 
a solution for a given problem reduces to finding a proof of that problem in an AL-based theory. The 
incompleteness of AL only means that, in its language, this logic is not as perfect/strong as as a formal 
tool could possibly be, and that, depending on needs, it makes sense to continue looking for further sound 
extensions (up to a complete one) of it. As pointed out earlier, when it comes to applications, unlike 
soundness, completeness is a desirable but not necessary condition. 

With the two logics in a sense competing for the same market, the main — or perhaps only — advantage 
of linear logic over CL is its having a nice and simple syntax. In fact, linear logic is (rather than has) a 
beautiful syntax; and computability logic is (rather than has) a meaningful semantics. At this point it is 
not clear what a CL-semantically complete extension of AL would look like syntactically. As a matter of 
fact, while the set of valid formulas of the exponential- free fragment of the language of linear logic has been 
shown to be decidable ([18]), so far it is not even known whether that set in the full language is recursively 
enumerable. If it is, finding a complete axiomatization for it would most likely require a substantially new 
syntactic approach, going far beyond the traditional sequent-calculus framework within which linear logic is 
constructed (a possible candidate here is cirquent calculus, briefly discussed at the end of this section). And, 
in any case, such an axiomatization would hardly be as simple as that of AL, so the syntactic simplicity 
advantage of linear logic will always remain. Well, CL has one thing to say: simplicity is good, yet, if it is 
most important, then nothing can ever beat ... the empty logic. 

The rest of this paper is organized as follows. Sections 2-8 provide a detailed introduction to the basic 
semantical concepts of computability logic: games and operations on them, two equivalent models of inter- 
active computation (algorithmic strategies), and validity. The coverage of most of these concepts is more 
detailed here than in the earlier survey-style papers [12, 15] on CL, and is supported with ample examples 
and illustrations. Section 9 provides an overview, without a proof, of the strongest technical result obtained 
so far in computability logic, specifically, the soundness and completeness of system CL4, whose logical vo- 
cabulary contains negation -i, parallel ("multiplicative") connectives A, V, — choice ("additive") connectives 
n,U with their quantifier counterparts n,U, and blind ("classical") quantifiers V, 3. Section 10 outlines 
potential applications of computability logic in knowledge base systems, systems for planning and action, 
and constructive applied theories. There the survey part of the paper ends, and the following two sections 
are devoted to a formulation (Section 11) and proof (Section 12) of the new result — the soundness of affinc 
logic with respect to the semantics of CL. The final Section 13 outlines some possible future developments 
in the area. 

This paper gives an overview of most results known in computability logic as of the end of 2005, by the 
time when the main body of the text was written. The present paragraph is a last-minute addition made at 
the beginning of 2008. Below is a list of the most important developments that, due to being very recent, 
have received no coverage in this chapter: 

• As already mentioned, the earlier conjecture about the completeness of Heyting's propositional intu- 
itionistic calculus with respect to the semantics of CL has been resolved positively. A completeness 
proof for the implicative fragment of intuitionistic logic was given in [20], and that proof was later 
extended to the full propositional intuitionistic calculus in [21]. With a couple of months' delay, 
Vereshchagin [35] came up with an alternative proof of the same result. 

• In [22], the implicative fragment of affine logic has been proven to be complete with respect to the 
semantics of computability logic. The former is nothing but implicative intuitionistic logic without 
the rule of contraction. Thus, both the implication of intuitionistic logic and the implication of affinc 
logic have adequate interpretations in CL — specifically, as the operations o— and — >, respectively. 
Intuitively, as will be shown later in Section 4, these are two natural versions of the operation of 
reduction, with the difference between Ao—B and A — ► B being that in the former A can be "reused" 
while in the latter it cannot. [22] also introduced a series of intermediate-strength natural versions of 
reduction operations. 

• Section 4.6 briefly mentions sequential operations. The recent paper [24] has provided an elaboration 
of this new group of operations (formal definitions, associated computational intuitions, motivations, 
etc.), making them full-fledged citizens of computability logic. It has also constructed a sound and 
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complete axiomatization of the fragment of computability logic whose logical vocabulary, together with 
negation, contains three — parallel, choice and sequential — sorts of conjunction and disjunction. 

• Probably the most significant of the relevant recent developments is the invention of cirquent calculus 
in [16, 23]. Roughly, this is a deductive approach based on circuits instead of formulas or sequents. It 
can be seen as a refinement of Gcntzen's methodology, and correspondingly the methodology of linear 
logic based on the latter, achieved by allowing shared resources between different parts of sequents and 
proof trees. Thanks to the sharing mechanism, cirquent calculus, being more general and flexible than 
sequent calculus, appears to be the only reasonable proof-theoretic approach capable of syntactically 
taming the otherwise wild computability logic. Sharing also makes it possible to achieve exponential- 
magnitude compressions of formulas and proofs, whether it be in computability logic or the kind old 
classical logic. 

2 Constant games 

The symbolic names used in CL for the two players machine and environment are T and _L, respectively, p 
is always a variable ranging over {T, _L}, with 

meaning p's adversary, i.e. the player which is not p. Even though it is often a human user who acts in the 
role of _L, our sympathies are with T rather than _L, and by just saying "won" or "lost" without specifying 
a player we always mean won or lost by T. 

The reason why I should be a fan of the machine even — in fact especially — when it is playing against 
me is that the machine is a tool, and what makes it valuable as such is exactly its winning the game, i.e. 
its not being malfunctional (it is precisely losing by a machine the game that it was supposed to win what 
in everyday language is called malfunctioning). Let me imagine myself using a computer for computing the 
"28% of x" function in the process of preparing my federal tax return. This is a game where the first move 
is mine, consisting in inputting a number m and meaning asking T the question "what is 28% of to?" . The 
machine wins iff it answers by the move/output n such that n = 0.28m. Of course, I do not want the machine 
to tell me that 27,000 is 28% of 100,000. In other words, I do not want to win against the machine. For 
then I could lose the more important game against Uncle Sam. 

Before getting to a formal definition of games, let us agree without loss of generality that a move is always 
a string over the standard keyboard alphabet. One of the non- numeric and non-punctuation symbols of this 
alphabet, denoted 4, is designated as a special-status move, intuitively meaning a move that is always illegal 
to make. A labeled move (labmove) is a move prefixed with T or _L, with its prefix (label) indicating 
which player has made the move. A run is a (finite or infinite) sequence of labmoves, and a position is a 
finite run. 

We will be exclusively using the letters T, A, O, $, ^, T, A, E, IT for runs, a, (3, 7, 5 for moves, and A for 
labmoves. Runs will be often delimited by "(" and ")", with (} thus denoting the empty run. The meaning 
of an expression such as ($, pa,T) must be clear: this is the result of appending to position $ the labmove 
pa and then the run T. We write 

for the result of simultaneously replacing every label p in every labmove of T by ->p. 

Our ultimate definition of games will be given later in terms of the simpler and more basic class of games 
called constant. The following is a formal definition of constant games combined with some less formal 
conventions regarding the usage of certain terminology. 

Definition 2.1 A constant game is a pair A = (Lr A ,Wn A ), where: 

1. Lr" 4 , called the structure of A, is a set of runs not containing (whatever-labeled) move 4k, satisfying 
the condition that a finite or infinite run is in Lr" 4 iff all of its nonempty finite — not necessarily proper — 
initial segments are in ~Lr A (notice that this implies (} € ~Lr A ). The elements of Lr' 4 are said to be legal 
runs of A, and all other runs are said to be illegal runs of A. We say that a is a legal move for p in 
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a position $ of A iff (<&, pa) G Lr A ; otherwise a is an illegal move. When the last move of the shortest 
illegal initial segment of T is p-labeled, we say that T is a p-illegal run of A. 

2. Wn", called the content of A, is a function that sends every run T to one of the players T or _L, 
satisfying the condition that if T is a p-illegal run of A, then Wn A (r) ^ p. When Wn A (r) = p, we say 
that r is a p-won (or won by p) run of A; otherwise V is lost by p. Thus, an illegal run is always lost by 
the player who has made the first illegal move in it. 

Let A be a constant game. A is said to be finite-depth iff there is a (smallest) integer d, called the 
depth of A, such that the length of every legal run of A is < d. And A is perifinite-depth iff every legal run 
of it is finite, even if there are arbitrarily long legal runs. [12] defines the depths of perifinite-depth games in 
terms of ordinal numbers, which arc finite for finite-depth games and transfinite for all other perifinite-depth 
games. Let us call a legal run L of A maximal iff T is not a proper initial segment of any other legal run 
of A. Then we say that A is finite-breadth if the total number of maximal legal runs of A, called the 
breadth of A, is finite. Note that, in a general case, the breadth of a game may be not only infinite, but 
even uncountable. A is said to be (simply) finite iff it only has a finite number of legal runs. Of course, 
A is finite only if it is finite-breadth, and when A is finite-breadth, it is finite iff it is finite-depth iff it is 
perifinitc-depth. 

The structure component of a constant game can be visualized as a tree whose arcs are labeled with 
labmoves, as shown in Figure f . Every branch of such a tree represents a legal run, specifically, the sequence 
of the labels of the arcs of that branch in the top-down direction starting from the root. For instance, the 
rightmost branch (in its full length) of the tree of Figure 1 corresponds to the run (±7, T7, Ta). Thus the 
nodes of a tree, identified with the (sub)branches that end in those nodes, represent legal positions; the root 
stands for the empty position, and leaves for maximal positions. 




Figure 1: A structure 

Notice the relaxed nature of our games. In the empty position of the above-depicted structure, both 
players have legal moves. This can be seen from the two (T-labeled and _L-labeled) sorts of labmoves on the 
outgoing arcs of the root. Let us call such positions/nodes heterogenous. Generally any non-leaf nodes 
can be heterogenous, even though in our particular example only the root is so. As we are going to see later, 
in heterogenous positions indeed either player is free to move. Based on this liberal attitude, our games can 
be called free, as opposed to strict games where, in every situation, at most one of the players is allowed 
to move. Of course, strict games can be considered special cases of our free games — the cases with no 
heterogenous nodes. Even though not having legal moves does not formally preclude the "wrong" player to 
move in a given position, such an action, as we remember, results in an immediate loss for that player and 
hence amounts to not being permitted to move. There are good reasons in favor of the free-game approach. 
Hardly many tasks that humans, computers or robots perform in real life are strict. Imagine you are playing 
chess over the Internet on two boards against two independent adversaries that, together, form the (one) 
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environment for you. Let us say you play white on both boards. Certainly the initial position of this game 
is not heterogenous. However, once you make your first move — say, on board #1 — the picture changes. 
Now both you and the environment have legal moves, and who will be the next to move depends on who 
can or wants to act sooner. Namely, you are free to make another opening move on board #2, while the 
environment — adversary #1 — can make a reply move on board #1. A strict-game approach would have 
to impose some not-very-adequate supplemental conditions uniquely determining the next player to move, 
such as not allowing you to move again until receiving a response to your previous move. Let alone that this 
is not how the real two-board game would proceed, such regulations defeat the very purpose of the idea of 
parallel/distributed computations with all the known benefits it offers. 

While the above discussion used the term "strict game" in a perhaps somewhat more general sense, let 
us agree that from now on we will stick to the following meaning of that term: 

Definition 2.2 A constant game A is said to be strict iff, for every legal position $ of A, we have 
{a | ($, Ta) G Lr A } = or {a | ($, Ta) G Lr^ 4 } = 0. 

Figure 2 adds a content to the structure of Figure 1, thus turning it into a constant game: 



Here the label of each node indicates the winner in the corresponding position. E.g., we see that the 
empty run is won by _L, and the run (Ta, T7, T/3) won by T. There is no need to indicate winners for 
illegal runs: as we remember, such runs are lost by the player responsible for making them illegal, so we 
can tell at once that, say, (Ta, T7, Ta, T/3, T7) is lost by T because the offending third move of it is T- 
labeled. Generally, every perifinite-depth constant game can be fully represented in the style of Figure 2 by 
labeling the nodes of the corresponding structure tree. To capture a non-perifinite-depth game, we will need 
some additional way to indicate the winners in infinite branches, for no particular (end)nodes represent such 
branches. 

The traditional, strict-game approach usually defines a player p's strategy as a function that sends every 
position in which p has legal moves to one of those moves. As pointed out earlier, such a functional view is 
no longer applicable in the case of properly free games. Indeed, if /t and f± are the two players' functional 
strategies for the game of Figure 2 with /t(()) = 01 and /j_(()) = /?, then it is not clear whether the first 
move of the corresponding run will be Ta or T/3. Yet, even if not functional, T does have a winning strategy 
for that game. What, exactly, a strategy means will be explained in Section 6. For now, in our currently 
available ad hoc terms, one of T's winning strategies sounds as follows: "Regardless of what the adversary 
is doing or has done, go ahead and make move a; make /3 as your second move if and when you see that the 
adversary has made move 7, no matter whether this happened before or after your first move" . Which of 
the runs consistent with this strategy will become the actual one depends on how (and how fast) _L acts, yet 
every such run will be a success for T. It is left as an exercise for the reader to see that there are exactly 
five possible legal runs consistent with T's above strategy, all won by T: (Ta), (Ta, T/3), (Ta, T7, T/3), 




Figure 2: Constant game = structure + content 
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(_L/3, Ta} and (±7, Ta, Tfi). As for illegal runs consistent with that strategy, it can be seen that every such 
run would be _L-illegal and hence, again, won by T. 

Below comes our first formal definition of a game operation. This operation, called prefixation, is 
somewhat reminiscent of the modal operator(s) of dynamic logic, ft takes two arguments: a (here constant) 
game A and a legal position $ of A, and generates the game {<&)A that, with A visualized as a tree in the 
style of Figure 2, is nothing but the subtree rooted at the node corresponding to position $. This operation 
is undefined when <J> is an illegal position of A. 

Definition 2.3 Let A be a constant game, and <3? a legal position of A. The game {^)A is defined by: 

• Lr<* >A = {r l ($,r> e Lr A }. 

• Wn(*> A (r) = w/($,r>. 

Intuitively, (&)A is the game playing which means playing A starting (continuing) from position That 
is, (<&)A is the game to which A evolves (will be "brought down") after the moves of <j> have been made. 

3 Games in general, and nothing but games 

Computational problems in the traditional, Church- Turing sense can be seen as strict, depth-2 games of the 
special type shown in Figure 3. The first-level arcs of such a game represent inputs, i.e. _L's moves; and the 
second-level arcs represent outputs, i.e. T's moves. The root of this sort of a game is always T-labeled as it 
corresponds to the situation when there was no input, in which case the machine is considered the winner 
because the absence of an input removes any further responsibility from it. All second-level nodes, on the 
other hand, are _L-labeled, for they represent the situations when there was an input but the machine failed 
to generate any output. Finally, each group of siblings of the third-level nodes has exactly one T-labeled 
member. This is so because traditional problems are about computing functions, meaning that there is 
exactly one "right" output per given input. What particular nodes of those groups will have label T — and 
only this part of the game tree — depends on what particular function is the one under question. The game 
of Figure 3 is about computing the successor function. 



Input 



Output 




Figure 3: The problem of computing n + 1 

Once we agree that computational problems are nothing but games, the difference in the degrees of 
generality and flexibility between the traditional approach to computational problems and our approach 
becomes apparent and appreciable. What we see in Figure 3 is indeed a very special sort of games, and 
there is no good call for confining ourselves to its limits. In fact, staying within those limits would seriously 
retard any more or less advanced and systematic study of computability. First of all, one would want to 
get rid of the "one T-labeled node per sibling group" restriction for the third-level nodes. Many natural 
problems, such as the problem of finding a prime integer between n and 2n, or finding an integral root 
of x 2 — 2n = 0, may have more than one as well as less than one solution. That is, there can be more 
than one as well as less than one "right" output on a given input n. And why not further get rid of any 



10 



remaining restrictions on the labels of whatever-level nodes and whatever-level arcs. One can easily think of 
natural situations when, say, some inputs do not obligate the machine to generate an output and thus the 
corresponding second-level nodes should be T-labeled. An example would be the case when the machine is 
computing a partially-defined function / and receives an input n on which / is undefined. So far we have 
been talking about generalizations within the depth-2 restriction, corresponding to viewing computational 
problems as very short dialogues between the machine and its environment. Permitting longer-than-2 or even 
infinitely long branches would allow us to capture problems with arbitrarily high degrees of interactivity and 
arbitrarily complex interaction protocols. The task performed by a network server is a tangible example of 
an infinite dialogue between the server and its environment — the collection of clients, or let us just say 
the rest of the network. Notice that such a dialogue is usually a properly free game with a much more 
sophisticated interface between the interacting parties than the simple input / output interface offered by the 
ordinary Turing machine model, where the whole story starts by the environment asking a question (input) 
and ends by the machine generating an answer (output), with no interaction whatsoever inbetween these 
two steps. 

Removing restrictions on depths yields a meaningful generalization not only in the upward, but in the 
downward direction as well: it does make perfect sense to consider "dialogues" of lengths less than 2. 
Constant games of depth we call elementary. There are exactly two elementary constant games, for 
which we use the same symbols T and _L as for the two players: 

game T game _L 

© © 

Figure 4: Elementary constant games 

We identify these with the two propositions of classical logic: T (true) and _!_ (false). "Snow is white" is 
thus a moveless game automatically won by the machine, while "Snow is black" is automatically lost. So, not 
only traditional computational problems are special cases of our games, but traditional propositions as well. 
This is exactly what eventually makes classical logic a natural — elementary — fragment of computability 
logic. 

As we know, however, propositions arc not sufficient to build a reasonably expressive logic. For higher 
expressiveness, classical logic generalizes propositions to predicates. Let us fix two infinite sets of expressions: 
the set {^1,^2, ■ • ■} of variables and the set {1,2,,...} of constants. Without loss of generality here we 
assume that this collection of constants is exactly the universe of discourse in all cases that we consider. By 
a valuation we mean a function e that sends each variable i to a constant e(x). In these terms, a classical 
predicate p can be understood as a function that sends each valuation e to either T (meaning that p is true 
at e) or _L (meaning that p is false at e). Propositions can thus be thought of as special, constant cases of 
predicates — predicates that return the same proposition for every valuation. 

The concept of games that we define below generalizes constant games in exactly the same sense as the 
above classical concept of predicates generalizes propositions: 

Definition 3.1 A game is a function from valuations to constant games. 

We write e[A] (rather than A(e)) to denote the constant game returned by game A for valuation e. Such 
a constant game e[A] is said to be an instance of A. 

We also typically write Lrf and Wnf instead of Lr e[A] and Wn e[A] . 

Throughout this paper, x,y,z will be usually used as metavariables for variables, c for constants, and e 
for valuations. 

Just as this is the case with propositions versus predicates, we think of constant games in the sense of 
Definition 2.1 as special, constant cases of games in the sense of Definition 3.1. In particular, each constant 
game A' is the game A such that, for every valuation e, e[A] = A' . From now on we will no longer distinguish 
between such A and A', so that, if A is a constant game, it is its own instance, with A = e[A] for every e. 

The notion of elementary game that we defined for constant games naturally generalizes to all games 
by stipulating that a given game is elementary iff all of its instances are so. Hence, just as we identified 
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classical propositions with constant elementary games, classical predicates from now on will be identified 
with elementary games. For instance, Even(x) is the elementary game such that e[Even(x)] is the game 
T if e(x) is even, and the game _L if e(x) is odd. Many other concepts originally defined only for constant 
games — including the properties strict, finite, (peri) finite- depth and finite-breadth — can be extended to all 
games in a similar way. 

We say that a game A depends on a variable x iff there are two valuations ei,e 2 which agree on all 
variables except x such that e±[A] ^ e 2 [A|. Constant games thus do not depend on any variables. A is said 
to be finitary iff there is a finite set x of variables such that, for every two valuations e\ and e 2 that agree 
on all variables of x, we have e\\A\ = e 2 [A\. The cardinality of (the smallest) such x is said to be the arity 
of A. So, "constant game" and "0-ary game" are synonyms. 

To generalize the standard operation of substitution of variables to games, let us agree that by a term we 
mean either a variable or a constant. The domain of each valuation e is extended to all terms by stipulating 
that, 

for any constant c, e(c) = c. 

Definition 3.2 Let A be a game, X\, . . . ,x n pairwise distinct variables, and t\, . . . , t n any (not necessarily 
distinct) terms. The result of substituting X\, . . . , x n by t\, . . . ,t n in A, denoted A(xi/t\, . . . , x n /t n ), is 
defined by stipulating that, for every valuation e, e[A(xi/ti, . . . ,x n /t n )] = e'[A], where e' is the valuation 
for which we have: 

1. e'(zi) = e(ii), e'(x n ) = e{t n ); 

2. for every variable y $ {xi, . . . ,x n }, e'(y) — e(y). 

Intuitively A(x\/ti, . . . , x n /t n ) is A with x\,...,x n remapped to ti, . . . , t n , respectively. For instance, if 
A is the predicate/elementary game x < y, then A(x/y,y/x) is y < x, A(x/y) is y < y, A(y/3) is x < 3, and 
A(z/3) — where z is different from x, y — remains x < y because A does not depend on z. 

Following the standard readability-improving practice established in the literature for predicates, we will 
often fix a tuple (x\, . . . , x n ) of pairwise distinct variables for a game A and write A as A(x\, . . . , x n ). It 
should be noted that when doing so, by no means do we imply that all of (or only) the 

variables on which A depends. Representing A in the form A{x\, . . . ,x n ) sets a context in which we can 
write A(ti, . . . , t n ) to mean the same as the more clumsy expression A(x\/t\, . . . , x n /t n ). So, if the game 
x < y is represented as A(x), then A(3) will mean 3 < y and A(y) mean y < y. And if the same game is 
represented as A(y, z) (where z ^ x, y), then A(z, 3) means x < z while A(y, 3) again means x < y. 

The entities that in common language we call games are at least as often non-constant as constant. 
Chess is a classical example of a constant game. On the other hand, many of the card games — including 
solitaire games where only one player is active — are more naturally represented as non-constant games: 
each session/instance of such a game is set by a particular permutation of the card deck, and thus the game 
can be understood as a game that depends on a variable x ranging over the possible settings of the deck. 
Even the game of checkers — another "classical example" of a constant game — has a natural non-constant 
generalization Checkers (x) (with x ranging over {8, 10, 12, 14, ...}), meaning a play on the board of size xxx 
where, in the initial position, the first |x black cells arc filled with white pieces and the last |a; black cells 
with black pieces. Then the ordinary checkers can be written as Checkers (8). Furthermore, the numbers of 
pieces of either color also can be made variable, getting an even more general game Checkers (x , y , z), with 
the ordinary checkers being the instance Checkers (8, 12, 12) of it. By further allowing rectangular- (rather 
than just square-) shape boards, we would get a game that depends on four variables, etc. Computability 
theory texts also often appeal to non-constant games to illustrate certain complexity-theory concepts such 
as alternating computation or PSPACE-completeness. The Formula Game or Generalized Geography ([33], 
Section 8.3) are typical examples. Both can be understood as games that depend on a variable x, with 
x ranging over quantified Boolean formulas in Formula Game and over directed graphs in Generalized 
Geography. 

A game A is said to be unistructural in a variable x — or simply a>unistructural — iff, for every 
two valuations e\ and e 2 that agree on all variables except x, we have Lr^ = Lr^ 2 . And A is (simply) 
unistructural iff Lr^ = Lr^ 2 for any two valuations ei and e 2 . A unistructural game is thus a game whose 
every instance has the same structure (the Lr component). And A is unistructural in x iff the structure 
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of any instance e[A] of A does not depend on how e evaluates the variable x. Of course, every constant 
or elementary game is unistructural, and every unistructural game is unistructural in all variables. While 
natural examples of non-unistructural games exist such as the games mentioned in the above paragraph, 
all examples of particular games discussed elsewhere in the present paper are unistructural. In fact, every 
non-unistructural game can be rather easily rewritten into an equivalent (in a certain reasonable sense) 
unistructural game. One of the standard ways to convert a non-unistructural game A into a corresponding 
unistructural game A' is to take the union (or anything bigger) U of the structures of all instances of A to 
be the common- for- all-instances structure of A', and then extend the (relevant part of the) Wn function of 
each instance e[A] of A to U by stipulating that, if T 6 (U — Lr^), then the player who made the first illegal 
(in the sense of e[A\) move is the loser in e[A']. So, say, in the unistructural version of generalized checkers, 
an attempt by a player to move to a non-existing cell would result in a loss for that player but otherwise 
considered a legal move. The class of naturally emerging unistructural games is very wide. All elementary 
games are trivially there, and Theorem 14.1 of [12] establishes that all of the game operations studied in CL 
preserve the unistructural property of games. In view of these remarks, if the reader feels more comfortable 
this way, without much loss of generality (s)he can always understand "game" as "unistructural game" . 

What makes unistructural games nice is that, even when non-constant, they can still be visualized in the 
style of Figures 2 and 3. The difference will be that whereas the nodes of a game tree of a constant game 
are always labeled by propositions (T or _L), now such labels can be any predicates. The constant game 
of Figure 3 was about the problem of computing n + 1. We can generalize it to the problem of computing 
n + z, where z is a (the only) variable on which the game depends. The corresponding non-constant game 
then can be drawn by modifying the labels of the bottom-level nodes of Figure 3 as follows: 




Denoting the above game by A(z), the game of Figure 3 becomes the instance ^4(1) of it. The latter 
results from replacing z by 1 in the tree of Figure 5. This replacement turns every label n + z = m into the 
constant game/proposition n+1 = m, i.e. — depending on its truth value — into T or T. 

Let A be an arbitrary game. We say that T is a unilegal run (position if finite) of A iff, for every 
valuation e, T is a legal run of e[A\. The set of all unilegal runs of A is denoted by LR A . Of course, 
for unistructural games, "legal" and "unilegal" mean the same. The operation of prefixation defined in 
Section 2 only for constant games naturally extends to all games. For (<fr)A to be defined, $ should be a 
unilegal position of A. Once this condition is satisfied, we define (&)A as the unique game such that, for 
every valuation e, e[($)yl] = (<j>)e[A|. For example, where A(z) is the game of Figure 5, (-Ll)A(z) is the 
subtree rooted at the first (leftmost) child of the root, and (±1, T2) A(z) is the subtree rooted at the second 
grandchild from the first child, i.e. simply the predicate 1 + z = 2. 

Computability logic can be seen as an approach that generalizes both the traditional theory of computa- 
tion and traditional logic, and unifies them on the basis of one general formal framework. The main objects 
of study of the traditional theory of computation are traditional computational problems, and the main 
objects of study of traditional logic are predicates. Both of these sorts of objects turn out to be special cases 
of our games. So, one can characterize classical logic as the elementary — non-interactive — fragment of 
computability logic. And characterize (the core of) the traditional theory of computation as the fragment of 
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computability logic where interaction is limited to its simplest, two-step — input/output, or question/answer 
— form. The basic entities on which such a unifying framework needs to focus are thus games, and nothing 
but games. 



4 Game operations 

As we already know, logical operators in CL stand for operations on games. There is an open-ended pool 
of operations of potential interest, and which of those to study may depend on particular needs and taste. 
Yet, there is a core collection of the most basic and natural game operations, to the definitions of which the 
present section is devoted: the propositional connectives 2 -i, A, V, — >, n, U, A, Y, >— , o, ?, o— and 
the quantifiers \~\, LI, A, V, V, 3. Among these we see all operators of classical logic, and our choice 
of the classical notation for them is no accident. It was pointed out earlier that classical logic is nothing 
but the elementary, zero-interactivity fragment of computability logic. Indeed, after analyzing the relevant 
definitions, each of the classically-shaped operations, when restricted to elementary games, can be easily 
seen to be virtually the same as the corresponding operator of classical logic. For instance, if A and B are 
elementary games, then so is A AB, and the latter is exactly the classical conjunction of A and B understood 
as an (elementary) game. In a general — not-necessarily-elementary — case, however, ->, A, V, — ► become 
more reminiscent of (yet not the same as) the corresponding multiplicative operators of linear logic. Of 
course, here we are essentially comparing apples with oranges for, as noted earlier, linear logic is a syntax 
while computability logic is a semantics, and it may be not clear in what precise sense one can talk about 
similarities or differences. In the same apples and oranges style, our operations U, \~\, U can be perceived 
as relatives of the additive connectives and quantifiers of linear logic, A, V as "multiplicative quantifiers", 
and A, Y, o, ? as "exponentials", even though it is hard to guess which of the two groups — A, Y or i, ? - 
would be closer to an orthodox linear logician's heart. The quantifiers V, 3, on the other hand, hardly have 
any reasonable linear-logic counterparts. 

Let us agree that in every definition of this section x stands for an arbitrary variable, A, B, A(x), A\ , A2, . . . 
for arbitrary games, e for an arbitrary valuation, and T for an arbitrary run. Note that it is sufficient to define 
the content (Wn component) of a given constant game only for its legal runs, for then it uniquely extends 
to all runs. Furthermore, as usually done in logic textbooks and as we already did with the operation of 
prcfixation, propositional connectives can be initially defined just as operations on constant games; then they 
automatically extend to all games by stipulating that e[. . .] simply commutes with all of those operations. 
That is, -iA is the unique game such that, for every e, e[->A] = ->ep4]; e[Ai A A2] is the unique game such 
that, for every e, e[A\ A A2] = e[A{\ A e^], etc. With this remark in mind, in each of our definitions 
of propositional connectives that follow in this section, games A, B, A\, A2, . . . are implicitly assumed to 
be constant. Alternatively, this assumption can be dropped; all one needs to change in the corresponding 
definitions in this case is to write Lrf and Wnf instead of simply Lr A and W/. 

For similar reasons, it would be sufficient to define QxA (where Q is a quantifier) just for 1-ary games A 
that only depend on x. Since we are lazy to explain how, exactly, Qx would then extend to all games, our 
definitions of quantifiers given in this section, unlike those of propositional connectives, neither explicitly nor 
implicitly do assume any conditions on the arity of A. 



4.1 Negation 

Negation -1 is the role-switch operation: it turns T's wins and legal moves into _L's wins and legal moves, 
and vice versa. For instance, if Chess is the game of chess from the point of view of the white player, then 
-1 Chess is the same game as seen by the black player. Figure 6 illustrates how applying -1 to a game A 

2 The term "propositional" is not very adequate here, and we use it only by inertia from classical logic. Propositions are very 
special — elementary and constant — cases of games. On the other hand, our "propositional" operations arc applicable to all 
games, and not all of them preserve the elementary property of their arguments, even though they do preserve the constant 
property. 
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generates the exact "negative image" of A, with T and _L interchanged both in the nodes and the arcs of 
the game tree. 




Figure 6: Negation 

Notice the three different meanings that we associate with symbol -■. In Section 2 we agreed to use -i as 
an operation on players (turning T into _L and vice versa), and an operation on runs (interchanging T with 
± in every labmove). Below comes our formal definition of the third meaning of -> as an operation on games: 

Definition 4.1 Negation -<A: 

• re Lr^ A iff -.r e Lr A . 

• Wn^(r) = T iff Wn A (nr) = _L. 

Even from the informal explanation of -i it is clear that -i-iA is always the same as A, for interchanging 
in A the payers' roles twice brings the players to their original roles. It would also be easy to show that we 
always have ->({$} A) = (-<$)->A So, say, if a is T's legal move in the empty position of A that brings A 
down to B, then the same a is _L's legal move in the empty position of ->A, and it brings ->A down to ->B. 
Test the game A of Figure 6 to see that this is indeed so. 

4.2 Choice operations 

n, U, I - ! and U are called choice operations. A\ n A 2 is the game where, in the initial position, _L has two 
legal moves (choices): 1 and 2. Once such a choice i is made, the game continues as the chosen component 
Ai, meaning that (_Li)(^4i n A2) = Af, if a choice is never made, _L loses. A\ iAA 2 is similar /symmetric, with 
T and _L interchanged; that is, in A\ U A 2 it is T who makes an initial choice and who loses if such a choice 
is never made. Figure 7 helps us visualize the way n and U combine two games A and B: 

An B AUB 




A B A B 



Figure 7: Choice propositional connectives 
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The game A of Figure 6 can now be easily seen to be (TU_L)n(_Ll_lT), and its negation be (_LnT)U(Tn_L). 
The symmetry /duality familiar from classical logic persists: we always have -i(A l~l B) = ->A U -if? and 
-i(A\JB) = -iA\1-iB. Similarly for the quantifier counterparts IH and U of n and U. We might have already 
guessed that rix^4(x) is nothing but the infinite n-conjunction A(l) l~l A{2) n A(3) l~l . . . and UxA(x) is 
A(l) U A(2) U A(3) U . . ., as can be seen from Figure 8. 

\lxA(x) UxA(x) 




A(l) A(2) A(3) A(l) A{2) A{3) 

Figure 8: Choice quantifiers 

So, we always have {-Lc)\~~\xA(x) = A(c) and (Tc)\-\xA(x) = A(c). The meaning of such a labmove pc 
can be characterized as that player p selects/specifies the particular value c for x, after which the game 
continues — and the winner is determined — according to the rules of A(c). 

Now we are already able to express traditional computational problems using formulas. Traditional 
problems come in two forms: the problem of computing a function f(x), or the problem of deciding a 
predicate p(x). The former can be captured by \~\xUy(f(x) = y), and the latter (which, of course, can be 
seen as a special case of the former) by \~\x(p(x) U -ip(x)). So, the game of Figure 3 will be written as 
nccUj/(x + lr=y), and the game of Figure 5 as IHxL^x + z — y). 

The following Definition 4.2 summarizes the above-said, and generalizes U from binary to any > 2-ary 
operations. Note the perfect symmetry in it: the definition of each choice operation can be obtained from 
that of its dual by just interchanging T with _L. 

Definition 4.2 In clauses 1 and 2, n is 2 or any greater integer. 

1. Choice conjunction A\ l~l . . . n A n : 

• Lr Ain - nA " ={(}}U{(±*,r) \i£{l,...,n}, reLr A -}. 

. Wn A ' n - n4 () =T; 

where n}, Wn Ain - nA " (±i, V) = Wn A * (r). 

2. Choice disjunction Ai U . . . U A n : 

• Lr AlU - uA " ={()}U{(T*,r) \ie{l,...,n}, T G L*r Ai }. 
. w /iU...uA„ () = i . 

where jg{l n}, Wn 4u "' u/1 " (Ti, T) = Wn^ (r). 

3. Choice universal quantification rixyl(x): 

• Lr^M = {()} u {(±c, r> | c e {1, 2, 3, . . .}, T G Lr A ^}. 

• W^'O - T; 

where ce {1,2,3,...}, Wn^ (l) (_Lc, T) = Wn A(c) (V). 

4. Choice existential quantification LJa;A(x): 

• Lr^ xA ^ = {()} U {(Tc, r> | c G {1, 2, 3, . . .}, T G Lr A ^}. 

• Wn^ (l) ()=l; 

where ce {1,2,3,...}, Wn^ xA{x) (Tc, T) = Wnf (c) (r). 
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4.3 Parallel operations 

The operations A, V, A, V combine games in a way that corresponds to our intuition of parallel computations. 
For this reason we call such operations parallel. Playing A x A A 2 (resp. A\ V A 2 ) means playing the two 
games simultaneously where, in order to win, T needs to win in both (resp. at least one) of the components 
Ai. Back to our chess example, the two-board game ->Chess V Chess can be easily won by just mimicking 
in Chess the moves that the adversary makes in ^Chess, and vice versa. This is very different from the 
situation with -i Chess U Chess, winning which is not easy at all: there T needs to choose between -i Chess 
and Chess (i.e. between playing black or white), and then win the chosen one-board game. Technically, a 
move a in the fcth A-conjunct or V-disjunct is made by prefixing a with 'fc.'. For instance, in (the initial 
position of) (A U B) V (C l~l D), the move '2.1' is legal for _L, meaning choosing the first n-conjunct in the 
second V-disjunct of the game. If such a move is made, the game will continue as (A U B) V C . The player 
T, too, has initial legal moves in (4U6)V(Cn D), which are '1.1' and '1.2'. As we may guess, AxA(x) is 
nothing but A(l) A A(2) A A(3) A..., and VxA(x) is nothing but A(l) V A(2) V A(3) V . . .. 

The following formal definition summarizes this meaning of parallel operations, generalizing the arity of 
A, V to any n > 2. In that definition and throughout the rest of this paper, we use the important notational 
convention according to which, for a string/move a, 

pa 

means the result of removing from T all (lab)moves except those of the form pa/3, and then deleting the 
prefix 3 'a' in the remaining moves, i.e. replacing each such pa/3 by p/3. For example, where T is the leftmost 
branch of the tree for (T n _L) V (_L U T) shown in Figure 9, we have T 1 - = (-L1) and V 2 - = (Tl). Intuitively, 
we view this T as consisting of two subruns, one (r 1 ) being a run in the first V-disjunct of (Tfll) V(1UT), 
and the other (r 2 ) being a run in the second disjunct. 

Definition 4.3 In clauses 1 and 2, n is 2 or any greater integer. 

1. Parallel conjunction A\ A . . . A A n : 

• Te L r A i A --- A ^n iff every move of V has the prefix H.' for some i G {1, . . . ,n} and, for each such i, 
FeLr Al . 

• Whenever T G Lr AlA - AA ", Wn AlA - AA " (r) = T iff, for each i G {1, . . . , n}, Wn A ' (V 1 -) = T. 

2. Parallel disjunction A\ V . . . V A n : 

• T G Lr" 4lV " v ' 4 " iff every move of V has the prefix %.' for some i G {1, . . . ,n} and, for each such i, 
FeLr A -. 

• Whenever T G Lr AlV - vA ", Wn ilV '" v4 {I) = J_ iff, for each * G {1, . . . , n}, Wn A ' (V 1 -) = !_. 

3. Parallel universal quantification AxA(x): 

• T G Lrf 1 ' 4 ' 1 ' iff every move of T has the prefix 'a' for some c G {1, 2,3,.. .} and, for each such c, 
F-eLr A(c) . 

• Whenever T G Lr£ xA{x \ Wn e AlA(l '(f) = T iff, for each c G {1,2,3, . . .}, Wnf (c) (r c -) = T. 

4. Parallel existential quantification \/xA(x): 

• T G Jjr]! xA< - x ^ iff every move of T has the prefix 'a' for some c G {1, 2,3,.. .} and, for each such c, 
T c - G Lr^ (c) . 

• Whenever T G Lr^ xA( ~ x \ Wn^ xA ^{T) = _L iff, for each c G {1,2,3, . . .}, Wnf'fj = _L. 

3 Here and later, when talking about a prefix of a labmove p-y, we do not count the label p as a part of the prefix. 
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As was the case with choice operations, we can see that the definition of each of the parallel operations 
can be obtained from the definition of its dual by just interchanging T with _L. Hence it is easy to verify that 
we always have ->(AAB) = -.AV-..B, -i(AvB) = ->AA->B, -^AxA(x) = \Zx^A(x), -\J xA{x) = Ax^A(x). 

Note also that just like negation (and unlike choice operations), parallel operations preserve the elemen- 
tary property of games and, when restricted to elementary games, the meanings of A and V coincide with 
those of classical conjunction and disjunction, while the meanings of A and V coincide with those of classical 
universal quantifier and existential quantifier. The same conservation of classical meaning is going to be the 
case with the blind quantifiers V, 3 defined later; so, at the elementary level, A and V are indistinguishable 
from V and 3. 

A strict definition of our understanding of validity — which, as we may guess, conserves the classical 
meaning of this concept in the context of elementary games — will be given later in Section 7. For now, let 
us adopt an intuitive explanation according to which validity means being "always winnable by a machine" . 
While all classical tautologies automatically remain valid when parallel operators are applied to elementary 
games, in the general case the class of valid principles shrinks. For example, -<P V (P A P) is not valid. 
Proving this might require some thought, but at least we can see that the earlier "mimicking" ("copy-cat") 
strategy successful for -i Chess V Chess would be inapplicable to -i Chess V ( Chess A Chess) . The best that 
T can do in this three-board game is to pair -i Chess with one of the two conjuncts of Chess A Chess. It is 
possible that then ^Chess and the unmatched Chess are both lost, in which case the whole game will be 
lost. 

When A and B are finite (or finite-depth) games, the depth of A A B or A V B is the sum of the depths of 
A and B, which signifies an exponential growth of the breadth. Figure 9 illustrates this growth, suggesting 
that once we have reached the level of parallel operations — let alone recurrence operations that will be 
defined shortly — continuing drawing trees in the earlier style becomes no fun. Not to be disappointed 
though: making it possible to express large- or infinite-size game trees in a compact way is what our game 
operators are all about after all. 



Tnl _LUT (Tnl)V(lUT) 




Figure 9: Parallel disjunction 

An alternative approach to graphically representing A V B (or A A B) would be to just draw two trees — 
one for A and one for B — next to each other rather than draw one tree for Ay B. The legal positions of 
Ay B can then be visualized as pairs (<J>, "J), where <J> is a node of the A-tree and 4' a node of the £?-tree; the 
"label" of each such position (<!>, "J/) will be T iff the label of at least one (or both if we are dealing with A AB) 
of the positions/nodes \1/ in the corresponding tree is T. For instance, the root of the (Tnl)V (_LUT)-tree 
of Figure 9 can just be thought of as the pair consisting of the roots of the (T n _L)- and (± U T)-trces; child 
#1 of the root of the (T n _L) V (_L U T)-tree as the pair whose first node is the left child of the root of the 
(T n _L)-tree and the second node is the root of the (_L U T)-tree, etc. It is true that, under this approach, a 
pair (<E>, 4') might correspond to more than one position of A V B. For example, grandchildren #1 and #5 
of the root of the (T n _L) V (_L U T)-tree, i.e. the positions (-L1.1, T2.1) and (T2.1, -Ll.l), would become 
indistinguishable. This, however, is OK, because such two positions would always be equivalent, in the sense 
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that 



(±1.1, T2.1)((T n ±) V (± U T)) = (T2.1, ±1.1)((T n ±) V (± U T)). 



Whether trees are or are not helpful in visualizing parallel combinations of games, prefixation is still very 
much so if we think of each (uni)legal position $ of A as the game ($) A This way, every (uni)legal run T 
of A becomes a sequence of games. 

Example 4.4 To the legal run T = (±2.7, T1.7, ±1.49, T2.49) of game A = L\x\ly(y ^ x 2 ) V UxUy(y = 
x 2 ) corresponds the following sequence, showing how things evolve as T runs, i.e. how the moves of T 
affect/modify the game that is being played: 



A : L\x\ly(y ^ x 2 )v\lxL\y(y = x 2 ), 

A V Uxn y (y^.x 2 )vUy(y = 7 2 ), 

A 2 : n y (y^7 2 )vUy(y = 7 2 ), 

A 3 : 49 ± 7 2 V Uy(y = 7 2 ), 

A 4 : 49^7 2 V49 = 7 2 , 



i.e. A, 
i.e. QA; 

i.e. (±2.7>Ao, 
i.e. (±2.7) A; 

i.e. (T1.7)A, 
i.e. (±2.7,T1.7)A 

i.e. (±1.49)A, 

i.e. (±2.7, Tl. 7, ±1.49) A 

i.e. (T2.49)A 3 , 

i.e. (±2.7, T1.7, ±1.49, T2.49)A 



The run hits the true proposition A, and hence is won by T. 

When visualizing A, V-games in a similar style, we are better off representing them as infinite conjunc- 
tions/disjunctions. Of course, putting infinitely many conjuncts/disjuncts on paper would be no fun. But, 
luckily, in every position of AxA(x) or VxA(x) only a finite number of conjuncts/disjuncts would be "acti- 
vated" , i.e. have a non-A(c) form, so that all of the other, uniform, conjuncts can be combined into blocks 
and represented, say, through an ellipsis, or through expressions such as Am<x<nA(x) or Ax>mA(x). 

Example 4.5 Let Odd(x) be the predicate "x is odd". 

The T-won legal run (T7.1) of Vx(Orfd(x) U ^Odd(x)) will be represented as follows: 

Vx > l(Odd(x) U -nOdd(x)); 

Vl<x<6(Odd(x) U -nOdd(x)) V 0dd(7) V Wx>8(0dd(x) U ^Odd{x)). 

And the infinite legal run V = (Tl.l, T2.2, T3.1, T4.2, T5.1, T6.2, . . .) of Ax(Odd(x) U -,Odd(x)) will be 
represented as follows: 

Ax>l(Odd(x) U -^Odd(x)); 

Odd(l) A Ax>2(Odd{x) U -,Odd(x)); 

Odd(l) A -^0dd(2) A Ax>3(0dd(x) U -,Odd(x)); 

Odd(l) A -nOrfd(2) A Odd(3) A Ax>4(0dd(x) U ^Odrf(x)); 

...etc. 

Note that T is won by T but every finite initial segment of it is lost. 



4.4 Reduction 

What we call reduction — > is perhaps most interesting of all operations, yet we do not introduce 
primitive operation as it can be formally defined by 



as a 



B^A = (nB)vA 

From this definition we see that, when applied to elementary games, 
because so do -i and V. 



has its ordinary classical meaning, 
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Intuitively, B — > A is (indeed) the problem of reducing A to B: solving B — > ^4 means solving A while 
having B as a computational resource. Resources are symmetric to problems: what is a problem to solve 
for one player is a resource that the other player can use, and vice versa. Since B is negated in ->B V A 
and negation means switching the roles, B appears as a resource rather than problem for T in B — > A. 

For example, the game of Example 4.4 can be written as I larl ly(y = x 2 ) — > na;LJy(y = x 2 ). For T, 

ria;Lly(y = x 2 ) is the problem of computing square, which can be seen as a task (telling the square of any 
given number) performed by T for J_. But in the antecedent it turns into a square-computing resource — a 
task performed by _L for T. In the run V of Example 4.4, T took advantage of this fact, and solved problem 
\~\xUy(y = x 2 ) in the consequent using _L's solution to the same problem in the antecedent. That is, T 
reduced \~~\xUy(y = x 2 ) to \~\xUy(y = x 2 ). 

To get a better appreciation of — > as a problem reduction operation, let us look a less trivial — already 
"classical" in CL — example. Let A(x, y) be the predicate "Turing machine (whose code is) x accepts input 
y" , and H (x, y) the predicate "Turing machine x halts on input y" . Note that then rixnij/ (A(x, y)\J—iA(x, y)) 
expresses the acceptance problem as a decision problem: in order to win, T should be able to tell which of the 
disjuncts — A(x, y) or ^A(x, y) — is true for any particular values for x and y selected by the environment. 
Similarly, V~\xV~\y(H{x, y) U —iH(x, y)) expresses the halting problem as a decision problem. No machine can 
(always) win \~\x\~\y(A(x,y) U ^A(x,y)) because the acceptance problem, just as the halting problem, is 
known to be undecidable. Yet, the acceptance problem is algorithmically reducible to the halting problem. 
Into our terms, this fact translates as existence of a machine that always wins the game 

r\xn y (H(x,y)U^H(x,y)) - \~\x\~\y(A(x, y) U ->A{x, y)) . (1) 

A successful strategy for such a machine (T) is as follows. At the beginning, T waits till _L specifies some 
values m and n for x and y in the consequent, i.e. makes the moves '2.m' and '2.n'. Such moves, bringing 
the consequent down to A(m, n) U -iA(m, n), can be seen as asking T the question "does Turing machine m 
accept input n?". To this question T replies by the counterquestion "does m halt on n?", i.e. makes the 
moves T.m and 'l.n', bringing the antecedent down to if (to, n) U -iH(m, n). The environment has to answer 
this counterquestion, or else it loses. If it answers "no" (i.e. makes the move '1.2' and thus further brings the 
antecedent down to -iH(m,n)), T also answers "no" to the original question in the consequent (i.e. makes 
the move '2.2'), with the overall game having evolved to the true and hence T-won proposition/elementary 
game -iH(m,n) — ► -iA(m, n). Otherwise, if the environment's answer is "yes" (move '1.1'), T simulates 
Turing machine m on input n until it halts, and then makes the move '2.1' or '2.2' depending whether the 
simulation accepted or rejected. Of course, it is a possibility that such a simulation goes on forever and 
thus no moves will be made by T in the consequent. This, however, will only happen when H(m,n) — the 
U-disjunct selected by the environment in the antecedent — is false, and having lied in the antecedent makes 
_L the loser no matter what happens in the consequent. 

Again, what the machine did in the above strategy indeed was a reduction: it used an (external) solution 
to the halting problem to solve the acceptance problem. There are various natural concepts of reduction, 
and a strong case can be made in favor of the thesis that the sort of reduction captured by — > is most basic 
among them, with a great variety of other reasonable concepts of reduction being expressible in terms of — >. 
Among those is Turing reduction. It will be discussed a little later when we get to recurrence operations. 
Another frequently used concept of reduction is mapping reduction that we are going to look at in the 
following paragraph. And yet some other natural concepts of reduction expressible in terms of — > may or 
may not have established names. For example, from the above discussion it can be seen that a certain 
reclucibility-style relation holds between the predicates A(x, y) and H (x, y) in an even stronger sense than 
the algorithmic winnability of (1). In fact, not only (1) is winnable, but also the generally harder-to-win 
game 

UxUy (H(x, y) U -,H(x, y) - A(x, y) U -,A(x, y)) . (2) 

This is so because T's above-described strategy for (1) did not use (while could have used) any values for x 
and y others than the values chosen for these variables by _L in the consequent. So, the n^n?/ prefix can 
be just made external as this is done in (2). It will be seen later that semantically our approach treats free 
variables as if they were (externally) bound by \~\. Hence, the winnability of (2), in turn, is the same as 
simply the winnability of 

H{x, y) U -,H(x, y) -» A{x, y) U -,A(x, y). 
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A predicate p(x) is said to be mapping reducible 4 to a predicate q(y) iff there is an effective function / 
such that, for any constants c, p(c) is true iff q(f(c)) is so. Here x abbreviates any n-tuple of pairwise distinct 
variables, c any n-tuple of constants, y any m-tuple of pairwise distinct variables, and / is a function that 
sends n-tuples of constants to ra-tuples of constants. Using A <-> B as an abbreviation for (A — > B) A (B — > 
A) and \~~\z for \~\z\ . . . \~~\zk where z = Zi, . . . , Zk (and similarly for Liz), it is not hard to see that mapping 
reducibility of p(x) to q(y) means nothing but existence of an algorithmic winning strategy for 

\lx\Jy(p(x) <-> q(y)). 

Our acceptance predicate A(x,y) can be shown to be mapping reducible to the halting predicate H(x,y), 
i.e. the game 

r\xr\y\Jx'\Jy'(A(x,y) <-► H(x',y')) 

shown to be winnable by a machine. An algorithmic strategy for T is the following. After _L selects values 
m and n for x and y, select the values m' and (the same) n for x' and y', and rest your case. Here m' is 
the Turing machine that works exactly as m does, with the only difference that whenever m enters its reject 
state, ml goes into an infinite loop instead, so that m accepts if and only if ml halts. Such an m', of course, 
can be effectively constructed from m. 

Notice that while the standard approaches only allow us to talk about (a whatever sort of) reducibility as 
a relation between problems, in our approach reduction becomes an operation on problems, with reducibility 
as a relation simply meaning computability of the corresponding combination (such as \~~\x\-\y(p(x) <-> q(y)) 
or A — > B) of games. Similarly for other relations or properties such as the property of decidability. The latter 
becomes the operation of deciding if we define the problem of deciding a predicate (or any computational 
problem) p(x) as the game \~~\x(p(x) U ^p(x)). So, now we can meaningfully ask questions such as "is 
the reduction of the problem of deciding p(x) to the problem of deciding q(x) reducible to the mapping 
reduction of p(x) to q(x)7" . This question would be equivalent to whether the following game has an 
algorithmic winning strategy: 

\lxUy(p(x) <-> q(y))^j -> 
\lx(q(x) U -<q(x)) -> rio;(p(ar) U -^p(x))j. 

This problem is indeed algorithmically solvable no matter what particular predicates p(x) and q(x) are, 
which means that mapping reduction is at least as strong as reduction. Here is a strategy for T: Wait till 
_L selects a value k for x in the consequent of the consequent of (3). Then specify the same value k for x in 
the antecedent of (3), and wait till _L replies there by selecting a value n for y. Then select the same value 
n for x in the antecedent of the consequent of (3). _L will have to respond by 1 or 2 in that component of 
the game. Repeat that very response in the consequent of the consequent of (3), and celebrate victory. 

We are going to see in Section 9 that (3) is a legal formula of the language of system CL4, which, 
according to Theorem 9.4, is sound and complete with respect to the semantics of computability logic. So, 
had our ad hoc methods failed to find an answer (and this would certainly be the case if we dealt with a 
more complex computational problem), the existence of a successful algorithmic strategy could have been 
established by showing that (3) is provable in CL4. Moreover, by clause (a) of Theorem 9.4, after finding a 
CL4-proof of (3), we would not only know that an algorithmic solution for (3) exists, but we would also be 
able to constructively extract such a solution from the proof. On the other hand, the fact that reduction is 
not as strong as mapping reduction could be established by showing that CL4 does not prove 



'r\x(q(x) U -<q(x)) -> \lx(p(x) U -^(x))) 
\lxL\y(p(x) <-> q(y)) 



(4) 

This negative fact, too, can be established effectively as, according to Theorem 9.2, the relevant fragment 
of CL4 is decidable. In fact, the completeness proof for CL4 given in [18] shows a way how to actually 
construct particular predicates — p(x) and q(x) in our case — for which the problem represented by a given 
CL4-unprovablc formula has no algorithmic solution. 



4 This term is adopted from [33]. The more common but less adequate name for what we call mapping reducibility is 
many-one reducibility. 
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4.5 Blind operations 

Another group of core game operations, called blind, comprises V and its dual 3. Intuitively, playing VxA(x) 
or 3xA(x) means just playing A(x) "blindly", without knowing the value of x. In VxA(x), T wins iff the 
play it generates is successful for every possible value of x, while in 3xA(x) being successful for just one 
value is sufficient. V and 3 thus essentially produce what is called games with imperfect information (see 
[32]). This sort of a blind play is meaningful or possible — and hence VxA(x), 3xA(x) defined — only when 
what moves are available (legal) does not depend on the unknown value of x; in other words, when A(x) is 
unistructural in x. 

Definition 4.6 Assume A{x) is unistructural in x. 

1. Blind universal quantification \/xA(x): 

• Lr^ 4 ^ = Lr^ (a;) . 

• Wn^ (l) {r) = T iff, for every constant c, Wn^ (c) (r) = T. 

2. Blind existential quantification 3xA(x): 

• Wnf xA{x) {T) = _L iff, for every constant c, Wnf (c) (r) = _L. 

As with the other pairs of quantifiers, one can see that we always have -tfxA(x) — 3x^A(x) and 
-i3xA(x) = Wx^A(x). 

To feel the difference between V and IH , compare the games 

\lx(Even(x) U Odd(x)) 

and 

Wx(Even(x) U Odd(x)). 

Both arc about telling whether a given number is even or odd; the difference is only in whether that "given 
number" is specified (made as a move by _L) or not. The first problem is an easy-to-win, depth-2 game of 
a structure that we have already seen. The depth of the second game, on the other hand, is 1, with only 
the machine to make a move — select the "true" disjunct, which is hardly possible to do as the value of x 
remains unspecified. 

Figure 10 shows trees for Even(x) U Odd(x) and \/x(Even(x) U Odd(x)^j next to each other. Notice that 
applying \/x does not change the structure of a (unistructural) game. What it does is that it simply prefixes 
every node with a \/x (we do not explicitly see such a prefix on the root because Vx_L = _L). This means 
that we always have ($}VxA(x) = \/x(<&)A(x). Similarly for 3x. 

Even(x) U Odd(x) ^x(Even{x) U Odd{x)) 




Figure 10: Blind universal quantification 

Of course, not all nonelementary V-games will be unwinnablc. Here is an example: 
\/x(Even(x) U Odd(x) — > \3y(Even(x x y) U Odd(x xy))). 
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Solving this problem, which means reducing the consequent to the antecedent without knowing the value 
of x, is easy: T waits till _L selects a value n for y. If n is even, then T selects the first U-disjunct in 
the consequent. Otherwise, if n is odd, T continues waiting until _L selects one of the U-disjuncts in the 
antecedent (if _L has not already done so), and then T makes the same move 1 or 2 in the consequent as _L 
made in the antecedent. One of the possible runs such a strategy can yield is (-L1.2, ±2.5, T2.2), which can 
be visualized as the following sequence of games: 



By now we have seen three — choice, parallel and blind — natural sorts of quantifiers. The idea of a forth 

— sequential — sort, which we will not discuss here, was outlined in [15]. It is worthwhile to take a quick look 
at how different quantifiers relate. Both \/xA(x) and AxA(x) can be shown to be properly stronger than 
ria;A(a;), in the sense that \/xP{x) -> \lxP(x) and AxP(x) -> \lxP(x) are valid while V~\xP(x) — ► \/xP(x) 
and V~\xP(x) — > AxP(x) are not. On the other hand, the strengths of \/xP{x) and AxP(x) are mutually 
incomparable: neither \/xP{x) — > AxP(x) nor AxP(x) — ► \/xP(x) is valid. The big difference between V 
and A is that, while playing \/xA(x) means playing one "common" play for all possible A(c) and thus \/xA{x) 

— just like ria:^4(a;) — is a one-board game, AxA{x) is an infinitely-many-board game: playing it means 
playing, in parallel, game A{1) on board #1, game A{2) on board #2, etc. When restricted to elementary 
games, however, the distinction between the blind and the parallel groups of quantifiers disappears as already 
noted and, just like -i, A, V, — >, A, V, the blind quantifiers behave exactly in the classical way. Having this 
collection of operators makes CL a conservative extension of classical first-order logic: the latter is nothing 
but CL restricted to elementary problems and the logical vocabulary -i, A, V, — V (and/or A), 3 (and/or 



4.6 Recurrence operations 

What is common to the members of the family of game operations called recurrence operations is that, 
when applied to A, they turn it into a game playing which means repeatedly playing A. In terms of resources, 
recurrence operations generate multiple "copies" of A, thus making A a reusable/recyclable resource. The 
difference between various sorts of recurrences is how "reusage" is exactly understood. Imagine a computer 
that has a program successfully playing Chess. The resource that such a computer provides is obviously 
something stronger than just Chess, for it permits to play Chess as many times as the user wishes, while 
Chess, as such, only assumes one play. The simplest operating system would allow to start a session of 
Chess, then — after finishing or abandoning and destroying it — start a new play again, and so on. The 
game that such a system plays — i.e. the resource that it supports/provides — is k Chess, which assumes 
an unbounded number of plays of Chess in a sequential fashion. We call A sequential recurrence. A 
more advanced operating system, however, would not require to destroy the old sessions before starting new 
ones; rather, it would allow to run as many parallel sessions as the user needs. This is what is captured 
by A Chess, meaning nothing but the infinite parallel conjunction Chess A Chess A Chess A . . .. Hence A is 
called parallel recurrence. As a resource, A Chess is obviously stronger than kChess as it gives the user 
more flexibility. But A is still not the strongest form of reusage. A really good operating system would 
not only allow the user to start new sessions of Chess without destroying old ones; it would also make 
it possible to branch/replicate each particular stage of each particular session, i.e. create any number of 
"copies" of any already reached position of the multiple parallel plays of Chess, thus giving the user the 
possibility to try different continuations from the same position. What corresponds to this intuition is 
o Chess, where o is called branching recurrence. 5 As all of the operations (except ->,—►) seen in this 

5 The term "branching recurrence" and the symbol 6 were established in [15]. The earlier (foundational) paper [12] uses 
"branching conjunction" and ! instead. Similarly, [12] uses the term "branching disjunction" instead of our present "branching 
corecurrence" , and symbol ? instead of ?. Finally, to our present symbol o— in [12] corresponds =>. 
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section, each sort of recurrence comes with its dual operation, called corecurrence. Say, the branching 
corecurrence ?A of A is nothing but b-*A as seen by the environment, so ?A can be defined as ^b^A; 
similarly for parallel corecurrence Y and sequential corecurrence Y. YA thus means the infinite parallel 
disjunction A\/ A\/ A\/ . . .. The sequential recurrence and sequential corecurrence of A, on the other hand, 
can be defined as infinite sequential conjunction AAAAAA . . . and infinite sequential disjunction 
AvAvAV . . ., respectively. An idea of the sequential versions of conjunction/disjunction, quantifiers and 
recurrence/corecurrence was informally outlined in a footnote of Section 8 of [15], and then fully elaborated 
in [24]. Out of laziness, in this paper we are not going to go any farther than the above intuitive explanation 
of sequential recurrence, just as we have not attempted and will not attempt to define the sequential versions 
of propositional connectives or quantifiers. 6 Only the parallel and branching sorts of recurrence will receive 
our full attention. 

Definition 4.7 

1. Parallel recurrence kA: 

i Te Lr AA iff every move of V has the prefix 'i.' for some i G {1, 2,3,.. .} and, for each such i, Y % - G Lr A . 

• Whenever T G Lr AA , we have 

Wn AA (r) = T iff, for each i G {1, 2, 3, . . .}, Wn A (P-) = T. 

2. Parallel corecurrence Y A: 

• r G Lr A iff every move of V has the prefix 'i.' for some i G {1, 2,3,.. .} and, for each such i, V' G Lr A . 

V A 

• Whenever T G Lr ' , we have 

Wn YA (r) = _L iff, for each i G {1, 2, 3, . . .}, Wn A (f-) = J_. 

Thus, from the machine's perspective, k\~\x\-\y(y = x 2 ) is the problem of computing the square function, 
and — unlike the case with nxl_lj/(y = x 2 ) — doing so repeatedly, i.e. as many times as the environment 
asks a question "what is the square of m?" . In the style of Example 4.5, a unilegal position of A A (rcsp. YA) 
can be represented as an infinite parallel conjunction (resp. disjunction), with the infinite contiguous block 
of "not-yet-activated" conjuncts (resp. disjuncts) starting from item #n combined together and written as 
knA (resp. YnA). Below is an illustration. 

Example 4.8 The T-won run (-L1.3, T1.9, _L2.1, T2.1) of the game k\~\xUy(y = x 2 ) generates the following 
sequence: 

k\~\xL\y(y = x 2 ) (or kl\~\xLly(y = x 2 )); 

Uy(y = 3 2 ) A A2nxUj/(2/ = x 2 ); 

9 = 3 2 A k2\lxL\y(y = x 2 ); 

9 = 3 2 A Uy(y = l 2 ) A k3\lxUy(y = x 2 ); 

9 = 3 2 A 1 = l 2 A k3\lxUy(y = x 2 ). 

Among the best known and most natural concepts of reducibility in traditional computability theory is 
that of Turing reducibility of a problem A to a problem B, meaning existence of a Turing machine that 
solves A with an oracle for B. In this definition "problem", of course, is understood in the traditional sense, 
meaning a two-step, question-answer problem such as computing a function or deciding a predicate. This 
is so because both the oracle and the Turing machine offer a simple, quest ion- answer interface, unable to 
handle problems with higher degrees or more sophisticated forms of interactivity. Our approach allows us to 
get rid of the "amateurish" concept of an oracle, and reformulate the above definition of Turing reducibility 
of A to B as computability of B >- A, where >- is defined by 

B y~ A = (kB) -» A. 

6 There are similar and even more serious reasons for not attempting to introduce blind versions of conjunction and disjunction. 



24 



This newborn concept of > — reducibility then not only adequately rephrases Turing reducibility, but also 
generalizes it, for ^-reducibility is defined for all games A and B rather than only those representing 
traditional computational problems. 

To get a better feel of >- and appreciate the difference between it and the ordinary reduction — 
remember our example of -^-reducing the acceptance problem to the halting problem. The reduction that 
T used in its successful strategy for 

V~\xV~\y(H(x, y) U ->H(x, y)) -> r~\xV~\y(A(x, y) U ->A{x, y)) 

was in fact a Turing reduction, as T's moves l.m and l.n can be seen as querying an oracle (with the 
environment acting in the role of such) regarding whether to halts on n. The potential usage of an "oracle", 
however, was limited there, as it could be employed only once. If, for some reason, T needed to repeat the 
same question with some different parameters to' and n' , it would not be able to do so, for this would require 
having two "copies" of the resource \~\x\~\y(H(x, y) U -*H(x,y)) in the antecedent, i.e. having 

UxUy{H{x, y) U -,H(x, y)) A \lx\ly(H(x, y) U -,H(x, y)) 

rather than Y~\xV~\y{H{x,y) U ^H(x,y)) there. On the other hand, Turing reduction assumes an unlimited 
oracle-querying capability. Such a capability is precisely accounted for by prefixing the antecedent with a 
A, i.e. replacing — ► with ^ . As an example of a problem > — reducible but not -^-reducible to the halting 
problem, consider the relative Kolmogorov complexity problem. It can be expressed as \~\x\~\y\-\zK(x,y, z), 
where K(x,y, z) is the predicate "z is the Kolmogorov complexity of x relative to y" , i.e. "z is the small- 
est (code of a) Turing machine that returns x on input y" . The problem of Turing-reducing the relative 
Kolmogorov complexity problem to the halting problem translates into our terms as 

k\lx\ly(H(x, y) U -^H(x, y)) -» UxUyUzK{x, y, z). 

Seeing the antecedent as an infinite A-conjunction, here is T's algorithmic winning strategy for the above 
game. T waits till _L selects some values to and n for x and y in the consequent, signifying asking T about 
the Kolmogorov complexity of to relative to n. Then, starting from i = 1, T does the following. In the ith 
A-conjunct of the antecedent, it makes two consecutive moves by specifying x and y as i and n, respectively, 
thus asking _L whether machine i halts on input n. If _L responds there by "no" , T increments i by one and 
repeats the step. Otherwise, if _!_ responds by "yes" , T simulates machine i on input n until it halts; if the 
simulation shows that machine i on input n returns to, T makes the move i in the consequent, thus saying 
that i is the Kolmogorov complexity of to relative to n; otherwise, T increments i by one and repeats the 
step. 

Turing reducibility has well-justified claims to be a formalization of our weakest intuition of algorithmic 
reducibility of one traditional problem to another, and ^-reducibility, as we now know, conservatively 
extends Turing reducibility to all games. This may suggest that >- -reducibility could be an adequate formal 
counterpart of our weakest intuition of algorithmic reducibility of one interactive problem to another. Such a 
guess would be wrong though. As claimed earlier, it is kA rather than kA that corresponds to our strongest 
intuition of using/reusing A. This automatically translates into another claim: it is c— -reducibility rather 
than >- -reducibility that (in full interactive generality) captures the weakest form of reducibility. Here o- 
is defined by 

B^A = (iB) -» A. 7 

It was mentioned in Section 1 that Heyting's intuitionistic calculus is sound and, in the propositional case, 
also complete with respect to the semantics of computability logic. This is so when intuitionistic implication is 
understood as o— , and intuitionistic conjunction, disjunction, universal quantifier and existential quantifier 
as U, I - ! and U, respectively. With intuitionistic implication read as >- , intuitionistic calculus is unsound 
as, for example, it proves 

(P^R)n(Q^R)^(PUQ^R) 
which fails to be a valid principle of computability. 

7 Now wc may guess that, if it ever comes to studying the sequential-recurrence-based reduction (aS) — > A, the symbol for 
it would be t>- . 
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> — reducibility and o— -rcducibility, while being substantially different in the general case, turn out to 
be equivalent when restricted to certain special sorts of problems with low degrees of interactivity such as 
what we have been referring to as "traditional problems" , examples of which being the halting, acceptance 
or relative Kolmogorov complexity problems. For this reason, both ^-reducibility and o— -reducibility are 
equally adequate as (conservative) generalizations of the traditional concept of Turing reducibility. 

It is now time to get down to a formal definition of branching recurrence A- This is not just as easy as 
defining A, and requires a number of auxiliary concepts and conventions. Let us start with a closer look at 
the associated intuitions. One of the ways to view both A A and A A is to think of them as games where 
_L is allowed to restart A an unlimited number of times without terminating the already-in-progress runs 
of A, creating, this way, more and more parallel plays of A with the possibility to try different strategies 
in them and become the winner as long as one of those strategies succeeds. What makes kA stronger (as 
a resource) than kA, however, is that, as noted earlier, in kA, _L does not have to really restart A from 
the very beginning every time it "restarts" it; rather, it can select to continue A from any of the previous 
positions, thus depriving T of the possibility to reconsider the moves it has already made. A little more 
precisely, at any time _L is allowed to replicate (backup) any of the currently reached parallel positions of A 
before further modifying it, which gives it the possibility to come back later and continue playing A from the 
backed-up position. This way, we get a tree of labmoves (each branch spelling a legal run of A) rather than 
just multiple parallel sequences of labmoves. Then kA can be thought of as a weak version of A A where only 
the empty position of A can be replicated, that is, where branching in the tree only happens at its root. A 
discussion of how A relates to Blass's [3, 4] repetition operator is given in Section 13 of [12]. 

To visualize the scheme that lies under our definition of A , consider a play over A Chess. The play takes 
place between a computer (T) and a user (_L), and its positions are displayed on the screen. In accordance 
with the earlier elaborated intuitions, we think of each such position $ as the game ($) Chess, and vice versa. 
At the beginning, there is a window on the screen — call it Window e — that displays the initial position 
of Chess: 

Window e 
Chess 



We denote this position by Chess, but the designer would probably make the window show a colorful 
image of a chess board with 32 chess pieces in their initial locations. The play starts and proceeds in an 
ordinary fashion: the players are making legal moves of Chess, which correspondingly update the position 
displayed in the window. At some (any) point, when the current position in the window is ($) Chess, _L may 
decide to replicate the position, perhaps because he wants to try different continuations in different copies 
of it. This splits Window e into two children windows named and 1, each containing the same position 
(<f>) Chess as the mother window contained at the time of split. The mother window disappears, and the 
picture on the screen becomes 



Window 



Window 1 



($) Chess 



($) Chess 



(again, let us try to imagine a real chess position colorfully depicted in the two windows instead of the bleak 
expression " ($) Chess y ' ) . 

From now on the play continues on two boards / in two windows. Either player can make a legal move in 
either window. After some time, when the game in Window has evolved to ($, Chess and in Window 1 
to ($, 0} Chess, _L can, again, decide to split one of the windows — say, Window 0. The mother window 
will be replaced by two children windows: 00 and 01, each having the same content as their mother had at 
the moment of split, so that now the screen will be showing three windows: 



Window 00 



Window 01 



Window 1 



($,*) Chess 



($,*) Chess 



($,9) Chess 



2G 



If and when, at some later moment, _L decides to make a third split — say, in Window 01 — the picture 
on the screen becomes 



Window 00 



Window 010 



Window 011 



Window 1 



(9, 9, A) Chess ($,*,E)C/iess ($, T) Chess ($, 9, II) Chess 



etc. At the end, the game will be won by T if and only if each of the windows contains a winning position 
of Chess. 

The above four-window position can also be represented as the following binary tree, where the name of 
each window is uniquely determined by its location in the tree: 




Window names will be used by the players to indicate in which of the windows they are making a move. 
Specifically, l w.a' is the move meaning making move a in Window w; and the move (by _L) that splits/replicates 
Window w is l w:\ Sometimes the window in which a player is trying to make a move may no longer exist. 
For example, in the position preceding the position of Figure 11, T might have decided to make move a in 
Window 01. However, before T actually made this move, _L made a replicative move in the same window, 
which took us to the four- window position of Figure 11. T may not notice this replicative move and complete 
its move 01. a by the time when Window 01 no longer exists. This kind of a move is still considered legal, 
and its effect is making the move a in all (in our case both) of the descendants of the no-longer-existing 
Window 01. The result will be 

Window 00 Window 010 Window 011 Window 1 



($,#,A)C7iess ($,#,E,Ta)C7iess ($, *, S, To) Chess ($,9,11) Chess 



The initial position in the example that we have just discussed was one-window. This, generally, is not 
necessary. The operation i can be applied to any construction in the above style, such as, say, 



Window 

Chess 



Window 1 

Checkers 



A play over this game, which our later-introduced notational conventions would denote by o (Chess o 
Checkers), will proceed in a way similar to what we saw, where more and more windows can be created, 
some (those whose names are 0-prefixed) displaying positions of chess, and some (with 1-prefixed names) 
displaying positions of checkers. In order to win, the machine will have to win all of the multiple parallel 
plays of chess and checkers that will be generated. 

As the dual of o, ? can be characterized in exactly the same way as i, only, in a ?-game, it is T who 
has the privilege of splitting windows, and for whom winning in just one of the multiple parallel plays is 
sufficient. 



27 



To put together the above intuitions, let us agree that by a bitstring we mean a string of Os and Is, 
including infinite strings and the empty string e. We will be using the letters w, u, v as metavariables 
for bitstrings. e will exclusively stand for the empty bitstring. The expression uw, meaningful only when u 
is finite, will stand for the concatenation of strings u and w. We write u ■< w to mean that u is an initial 
segment of w. And u -< w means that u is a proper initial segment of w, i.e. that u ^ w and u ^ w. 

Definition 4.9 

1. A bitstring tree (BT) is a nonempty set T of bitstrings, called the branches of the tree (with finite 
branches also called nodes), such that, for all bitstrings w,u, the following three conditions 8 are satisfied: 

a) If w £ T and u -< w, then a£T; 

b) wO e T iff wl e T (finite w). 

c) If w is infinite and all u with u -< w are in T, then so is w. 

2. A complete branch of a BT T is a branch w of T such that for no bitstring u with w ~< u do we 
have u 6 T. A finite complete branch of T is also said to be a leaf of T. Notice that T (as a set of strings) is 
finite iff all of its branches (as strings) are so. Hence, the terms "complete branch" and "leaf are synonymic 
for finite BTs, as are "branch" and "node". 

3. A decoration for a finite BT T is a function d that sends each leaf of T to some game. 

4. A decorated bitstring tree (DBT) T is a pair (T,d), where T — called the BT-structure of T 
— is a finite BT, and d — called the decoration of T — is a decoration for T. Such a T is said to be a 

singleton iff T = {e}. We identify each singleton DBT ({e},d) with the game d(e), and vice versa: think 
of each game A as the singleton DBT ({e},d) with d(e) = A. In some contexts, on the other hand, we may 
identify a DBT T with its BT-structure T, and say "branch (leaf, etc.) of T" to mean "branch (leaf, etc.) 
of T" . 

In Figure 11 we see an example of a DBT whose BT-structure is {e, 0, 1, 00, 01, 010, 011} and whose 
decoration is the function d given by d(00) = A) Chess, d(010) = d(011) = (<&,*, S) Chess, d(l) = 

($, 6,11) Chess. 

Drawing actual trees for DBTs is not very convenient, and an alternative way to represent a DBT 
T = (T, d) is the following: 

• If T is a singleton with d(e) — A, then T is simply written as A. 

• Otherwise, T is written as E o E\, where E and E\ represent the sub-DBTs of T rooted at and 1, 
respectively. 

For example, the DBT of Figure 11 will be written as 

((<$,*, A) Chess) o (((*,*, Y,)Chess) o (($,#, T,)Chess))^ o 9, n) Chess^ . 

We are going to define o and ? as operations applicable not only to games, i.e. singleton DBTs, but to 
any DBTs as well. 

Definition 4.10 Let T = (T,d) be DBT. We define the notion of a prelegal position of iT (rcsp. ?T), 
together with the function Tree iT (resp. Tree ¥r ) that associates a BT Tree 4T ($) (resp. Tree ?T (<I>)) with 
each such position <I>, by the following induction: 

a) () is a prelegal position of oT (rcsp. ?T), and 

Tree ir () = T 
(resp. Tree 9r ()=T). 

b) ($, A) is a prelegal position of oT (resp. ?T) iff <f> is so and one of the following two conditions is 
satisfied: 

8 Due to a mechanical error, the third condition was lost in the published version of [12]. 
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1. A = -Lw. (rcsp. A = Tw.) for some leaf w of Tree (<3>) (resp. Tree ( < J > ))- We call this sort of a labmove 

A or move w. replicative. In this case 

Tree 6T ($,±w:) = Trcc ir ($) U {wO,wl} 
(resp. Tree ?r ($,Tw;} = Trcc ?r ($) U {wO,wl}). 

2. A = pw.a for some node w of Tree iT ($) (resp. Tree ? T ($)), player p and move a. We call this sort of a 

labmove A or move w.a nonreplicative. In this case 

Trcc 6T ($, pw.a) = Tree Ar ($) 
(resp. Trec 9r ($, pw.a) = Trcc ?r ($)). 

As mentioned earlier, with a visualization in the style of Figure 11 in mind, the meaning of a replicative 
labmove pw: is that player p splits leaf/ window w into two children windows wO and wl; and the meaning 
of a nonreplicative labmove pw.a is that p makes the move a in all windows whose names start with w. 
Prelegality is a minimum condition that every legal run of a i- or ?-game should satisfy. In particular, 
prelegality means that new windows have only been created by the "right player" (i.e. 1 in a i-game, 
and T in a ?-game), and that no moves have been made in not-yet-created windows. As for Tree aT ($) or 
Tree^ T (&) , it shows to what we will be referring as the underlying BT-structure of the position to which 
$ brings the game down. Note that, as can be seen from the definition, whether $ is a prelegal position of 
AT or ?T and what the value of Tree bT (<&) or Tree ?r ($) is, only depends on the BT-structure of T and not 
on its decoration. 

The concept of a prelegal position of iT can be generalized to all runs by stipulating that a prelegal 
run of iT is a run whose every finite initial segment is a prelegal position of iT. Similarly, the function 
Tree bT can be extended to all prelegal runs of iT by stipulating that Tree i>T (Ai, A 2 , A3, . . .) is the smallest 
BT containing all elements of the set 

Tree 6T ()U Tree Ar (Ai) U Tree 6T (X 1 , \ 2 ) U Tree bT (Ai, A 2 , A 3 ) U . . . (5) 

of bitstrings. In other words, Tree T (Ai, A2, A3, . . .) is the result of adding to (5) every infinite bitstring w 
such that all finite initial segments of w are in (5). The concept of a prelegal position of ?T and the function 
Tree ' generalize to infinite runs in a similar way. 

We now introduce an important notational convention that should be remembered. Let u be a bitstring 
and T any run. Then 

will stand for the result of first removing from T all labmoves except those that look like pw.a for some 
bitstring w with w ^ u, and then deleting this sort of prefixes 'w.' in the remaining labmoves, i.e. replacing 
each remaining labmove pw.a (where w is a bitstring) by pa. Example: If u = 101000 . . . and T = 
(Te.ai, Te:, Tl.a2, TO. 03, -LI:, TlO.o^}, then T- u = (Tai, -La 2 , Ta^). 

Being a prelegal run of iT is a necessary but not a sufficient condition for being a legal run of this game. 
For simplicity, let us consider the case when T is singleton DBT A, where A is a constant game. It was noted 
earlier that a legal run T of bA can be thought of as consisting of multiple legal runs of A. In particular, 
these runs will be the runs T- u , where u is a complete branch of Tree A (T). The labmoves of T- u for such a 
u are those pa that emerged as a result of making (nonreplicative) labmoves of the form pw.a with w <u. 
For example, to branch 010 in Figure 11 corresponds run ($, ^, S), where the labmoves of $ originate from 
the nonreplicative labmoves of the form pe.a (i.e. p.a) made before the first replicative move, the labmoves 
of ^ originate from the nonreplicative labmoves of the form pw.a with w <Q made between the first and 
the second replicative moves, and the labmoves of £ originate from the nonreplicative labmoves of the form 
pw.a with w ^ 01 made between the second and the third replicative moves. Generally, for a prelegal run V 
of i A to be a legal run, it is necessary and sufficient that all of the runs r-", where u is a complete branch 
of Tree oA {T), be legal runs of A. And for such a T to be a T-won run, it is necessary and sufficient that all 
of those T^ u be T -won runs of A. 
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When T is a non-singleton DBT, the situation is similar. For example, for T to be a legal (resp. T-won) 
run of o(Chess o Checkers), along with being a prelegal run, it is necessary that, for every complete branch 
Ou of Tree b(ChessoCheckers) j-^ou be a legal ( resp T _ won ) run of Qhess and, for every complete branch 

lu of the same tree, T- lu be a legal (resp. T-won) run of Checkers. 
Finally, the case with ?T, of course, is symmetric to that with iT. 

All of the above intuitions are summarized in the following formal definitions of i and ? , with Definition 
4.11 being for the simpler case when T is a singleton, and Definition 4.12 generalizing it to all DBTs. In 
concordance with the earlier remark that considering constant games is sufficient when defining propositional 
connectives, Definition 4.11 assumes that A is a constant game, and Definition 4.12 assumes that T is a 
constant DBT, meaning a DBT whose decoration sends every leaf of its BT-structure to a constant game. 

Definition 4.11 Assume A is a constant game. 

1. Branching recurrence oA: 

• Te Lr*' 4 iff r is a prelegal run of <U, and Y^ u e Lr A for every complete branch u of Tree*" 4 (r) . 

• Whenever T e Lr 6A , Wn 6A (T) = T iff Wn J (r^") = T for every complete branch u of Tree iA (r). 

2. Branching corecurrence ? 'A: 

• Te Lr ?j4 iff r is a prelegal run of tA, and T^ u e Lr- 4 for every complete branch u of Tree 1 A (T) . 

• Whenever T e Lr 9A , Wn 9A (T) = _L iff Wn J (r^") = _L for every complete branch u of Trce ?j4 (r). 

Definition 4.12 Assume T = (T, d) is a constant DBT. 

1. Branching recurrence iT: 

• Te Lr 6T iff r is a prelegal run of iT, and T- wu e Lr d( - w) for every complete branch wu of Trcc 6T (r> 
where w is a leaf of T. 

• Whenever T e Lr ir , Wn ir (r) = T iff Wn d{w ' ) {T^ wu ) = T for every complete branch wu of Tree ir (r) 
where w is a leaf of T. 

2. Branching corecurrence ?T: 

• Te Lr ?r iff r is a prelegal run of ?T, and T- wu e Lr d(lu) for every complete branch wu of Tree ?r (r) 
where w is a leaf of T. 

• Whenever T e Lr 9r , Wn ?r (r) = T iff Wn d{w) (T^ wu ) = T for every complete branch wu of Trcc ?r (r) 
where w is a leaf of T. 

Let us not forget to make our already routine observation that the definition of either operation i , ? can 
be obtained from the definition of its dual by just interchanging T with T. 

Now it would be interesting to see how the moves of unilegal runs affect o- and ?-games. In fact, being 
able to describe the effect of such moves was our main motivation for defining o and ? in the general form 
as operations on DBTs. We need two preliminary definitions here. 

Definition 4.13 Suppose T = (T, d) is a DBT and to is a leaf of T. We define Rep^p"] as the following 
DBT (T',rf') : 

1. V = TU {wO,wl}. 

2. d! is the decoration for T' such that: 

(a) d'(wO) = d'(wl) = d{w); 

(b) for every other wO,wl) leaf u of T", d'{u) = d(u). 
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Examples: 

1. Re Po [Ao (BoC)} = {AoA)o(BoC); 

2. Rep w [Ao (BoC)] = Ao ((B o B) o C); 

3. Re Pll [Ao(B oC)] = Ao(Bo(C oC)). 

Definition 4.14 Suppose T = (T, d) is a DBT, w is a node of T and, for every leaf u of T with to -<u, (A) 
is a unilegal position of d(u). We define Nonrep^ [T] as the DBT (T,d'), where d' is the decoration for T 
such that: 

(a) For every leaf u of T with w -<u, d'(u) = (X)d(u); 

(b) for every other leaf u of T, d'(u) = d(u). 

Examples (assuming the appropriate unilegality conditions on (A)): 

1. Nonrep\ Q [Ao (-BoC)] = Ao((\)BoC); 

2. Nonrep$[Ao(BoC)} = A o ((X)B o (A)C); 

3. Nonrep*[A o (B o C)] = (\)Ao((\)Bo(\)C). 

The following theorem is a combination of Propositions 13.5 and 13.8 proven in [12]: 

Theorem 4.15 Suppose T = (T,d) is a DBT, and A any labmove. 

1. (A) e LR oT i/f one of tte following conditions holds: 

(a) A is (i/ie replicative labmove) ±.w:, where w is a leaf ofT. In this case (±w:)bT = Rep w [T]. 

(b) A is (i/ie nonreplicative labmove) pw.a, where p is either player, w is a node ofT and, for every leaf 
u of T with w ^u, (pa) is a unilegal position of d(u). In this case (pw.a)oT — bNonrep^\T]. 

2. (A) e LR T iff one of the following conditions holds: 

(a) A is (the replicative labmove) Tw:, where w is a leaf ofT. In this case (Tw;)?T = °Rep w [T~]. 

(b) A is (the nonreplicative labmove) pw.a, where p is either player, w is a node ofT and, for every leaf 
u ofT with w ^u, (pa) is a unilegal position of d(u). In this case (pw.a)^T = ? Nonrep*^ [T] . 

This theorem allows us to easily test whether a given run is a (uni) legal run of a given o- or ?-game, and 
if it is, to write out the corresponding sequence of games. 

Example 4.16 Let T = (_Le:, ±0.3, T0.9, _L1:, _L10.1, T10.1), and A = l,\lx[Jy(y = x 2 ). In view of Theo- 
rem 4.15, T is legal for A , and it brings the latter down to game A 6 as shown below: 



A 
Ai 
A 2 
A 3 
A 4 
A 5 
A e 



r\xL\y(y = x 2 )); 

\~\xL\y(y = x 2 ) o \~\xL\y(y = x 2 )j , 
} Uy(y = 3 2 )onxUy(y = x 2 )), ' 
1 < = 3 2 )onxUy(y = x 2 )), ' 
' (9 = 3 2 ) o (\lxL\y(y = x 2 ) o \lxL\y(y = x 2 )) 
(9 = 3 2 ) o (Liy(y = l 2 ) o \lxL\y(y = x 2 ) 



■e. (-Le:)A ; 

.e. (_L0.3)Ai; 

.e. (T0.9)A 2 ; 

■e. (T1:)A 3 ; 

.e. (_L10.1)A 4 ; 



o ((9 = 3 2 ) o ((1 = l 2 ) o r\x\Jy(y = x 2 ))) , i.e. (T10.1) A 5 . 



The empty run (} is a T-won run of each of the three o-components of Aq. It can be easily seen that 
then (and only then) () is a T-won run of Aq, for i(. . . o . . .) essentially acts as parallel conjunction. Hence 
T is a T-won run of Aq. 

The run that we see in the above example, though technically different, is still "essentially the same" 
as the one from Example 4.8. Indeed, as noted earlier, i and A are equivalent when applied to traditional, 
low-interactivity problems such as \~\xUy(y = x 2 ). What makes the resource bA stronger than KA is _L's 
ability to try several different responses to a same move by T. In b^~\xUy(y = x 2 ), however, ± cannot take 
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advantage of this flexibility because there are no legal runs of \~\x\-\y(y — x 2 ) where _L's moves follow T's 
moves. 

To get a feel of the substantial difference between A and A, let us consider, for simplicity, the bounded 
versions o fc , ? b , l\ b , Y fc of our recurrence operations. Here b is a positive integer, setting the bound on the 
number of parallel plays of game A that can be generated in a legal run of «U kA, YA). That is, A A 
and Y b A are nothing but the parallel conjunction and parallel disjunction of b copies of A, respectively. And 
6 A and TA are defined as bA and ?A, with the only difference that, in a legal run T, a replicative move 
can be made at most 6—1 times, so that Tree A (T) or Tree ? A (T) will have at most b complete branches. 

We want to compare ? 2 £> with Y 2 £>, i.e. with DM D, where 

D = ( Chess U -i Chess) l~l ( Checkers U -i Checkers) . 

Winning D V £) is not easy for T unless T is a champion in either chess or checkers. Indeed, a smart 
environment may choose the left Fl-conjunct in the left occurrence of D in D V D while choose the right 
n-conjunct in the right occurrence. This will bring the game down to 

( Chess U -i Chess) V ( Checkers U -i Checkers) . 

T in trouble now. It can, say, make the moves '1.1' and '2.2, bringing the game down to Chess V ^Checkers. 
This will not help much though, as winning Chess V ^Checkers, unlike Chess V -> Chess, is not any easier than 
winning either disjunct in isolation. 

On the other hand, T does have a nice winning strategy for ? D. At the beginning, T waits till _L 
chooses one of the two n-conjuncts of D. This brings the game down to, say, ? 2 (Chess U -^Chess). Then 
and only then, T makes a replicative move, thus creating two copies of Chess U -i Chess. In one copy T 
chooses the left U-disjunct, and in the other copy chooses the right U-disjunct. Now the game will have 
evolved to ? (Chess o -i Chess). With ? (A o -iA) essentially being nothing but A V ->A, mimicking in Chess 
the moves made by _L in -i Chess and vice versa guarantees a success for T. Among the runs consistent with 
this strategy is 

(_L.l, Te:, T0.1, T1.2, Tl.ai, TO.ai, _L0.a 2 , Tl.a 2 , ±l.a 3 , T0.a 3 , ...), 

to which corresponds the following sequence of games: 

? ((Chess U -i Chess) n (Checkers U ^Checkers)); 
f (Chess U ^ Chess); 

? 1 ((Chess LM Chess) o ( Chess LM Chess)); 

? 1 ( Chess o ( Chess U -. Chess) ) ; 

? 1 ( Chess o -i Chess) ; 

V 1 (Chess o (±ai)^Chess); 

? 1 ((Tai } Chess o (±_ai)-iChess); 

? ((Tai, -La2) Chess o (_Lai)^C/iess); 

? ((T«i, -La2) Chess o (_Lai, Ta 2 )^C/iess); 

? ((Tai, -La2) Chess o (-Lai, T«2, ±a3)^C/iess); 

? ((Tai, -La 2 , Tct 3 ) C/iess o (.Lai, Ta2, _La3)^C/iess); 

As we are going to see later, afflnc logic is sound with respect to the semantics of computability logic no 
matter whether the exponential operators !, ? of the former are understood as A, Y or A, ?. Thus, affine logic 
cannot distinguish between the two groups of recurrence operations. But computability logic certainly sees 
a difference. As noted earlier, it validates 

(Pc^R)\l(Qc^R)c^(PuQ^R) 

while makes 

(P^R)n(Q^R)^(PUQ^R) 



32 



fail. Here are two other examples of principles that can be shown to be valid with one sort of recurrence 
while invalid with the other sort: 

A(P U Q) -> iP U lQ is valid; 

k(P U Q) -> kP Ll kQ is not. 

P Ak(P -> Q AP) kQ is valid; 
P A A(P — > Q A P) — > AQ is not. 

As for how the strengths of A and A relate, as we may guess, the situation is: 

oP — > AP is vaiid; 
AP -> AP is not 

5 Static games 

Our games are obviously general enough to model anything that one would call a (two-agent, two-outcome) 
interactive problem. However, they are a bit too general. There are games where the chances of a player to 
succeed essentially depend on the relative speed at which its adversary acts. A simple example would be the 
following game: 




Figure 12: A non-static game 

One cannot ask which player has a winning strategy here, for this game is a contest of speed rather than 
intellect: the winner will be whoever is fast enough to move first. CL does not want to consider this sort of 
games meaningful computational problems, and restricts its attention to the subclass of games that it calls 
static. Intuitively, static games are ones where speed is irrelevant: in order to win, for either player only 
matters what to do (strategy) rather than how fast to do (speed). 'These arc games where, roughly speaking, 
it never hurts a player to postpone making moves'. 9 

Static games are defined in terms of the auxiliary concept of p-delay. The notation T T used below means 
the result of deleting from T all _L-labeled (lab)moves. Symmetrically for T^. 

Definition 5.1 Let p be either player, and T, A arbitrary runs. We say that A is a p-delay of T iff the 
following two conditions are satisfied: 

1. A T = T T and A 1 - = 1^; 

2. for any k,n > 1, if the kth -ip-labeled move is made earlier than (is to the left of) the nth p-labeled 
move in T, then so is it in A. 

Intuitively, "A is a p-delay of T" means that in A both players have played the same way as in T 
(condition 1), only, in A, p might have been acting with some delay, i.e. slower than in T (condition 2). 
In more technical terms, A is the result of shifting in T some (maybe all, maybe none) p-labeled moves to 
the right; in the process of shifting, p-labeled moves can jump over -ip-labeled moves, but a p-labeled move 
can never jump over another p-labeled move. For example, the run T = (Ten, _L/3, T7, _Lo~) has exactly the 
following five T-delays: 

A! = (Ta,T/?,T 7 ,TS) (= V); 
A 2 = (_L/?,Ta,T 7 ,_L<5); 
A 3 = (Ta,±/3,T<5,T 7 ); 
A 4 = (T/3,Ta,T<5,T 7 ); 
A 5 = (T/?,iATa,T 7 ). 

9 From the American Mathematical Society review of [12] by Andreas Blass. 
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Definition 5.2 A constant game A is said to be static iff, for any player p and any runs T, A such that A 
is a p-delay of T, we have: 

if Wn A (r) = p, then Wn A (A) = p. 

This definition generalizes to all games by stipulating that a not-necessarily-constant game is static iff every 
instance of it is so. 

Looking at the game of Figure 12, (_L/3, Ta) is a T-delay of (Ta, _L/3). The latter is T-won while the 
former is not. So, that game is not static. On the other hand, all of the other examples of games we have 
seen or will see in this paper are static. This is no surprise. In view of the following theorem, the closure 
of the set of all strict games including all predicates under all of our game operations forms a natural 
family of static games: 

Theorem 5.3 

1. Every strict game (and hence every elementary game) is static. 

2. Every game operation defined in this paper preserves the static property of games. 

Proof. That all strict games are static has been proven in [12] (Proposition 4.8); and, of course, every 
elementary game is trivially strict. This takes care of clause 1. As for clause 2, it is a part of Theorem 14.1 
of [12]. Even though the operations A, Y, A, V were not officially introduced in [12], they can be handled in 
exactly the same way as A, V. □ 

See Section 4 of [12] for arguments in favor of the belief that static games are adequate formal counterparts 
of our intuition of "pure", speed-independent interactive computational problems. Based on that belief, CL 
uses the terms "static game" and (interactive) "computational problem" as synonyms. We have been 
informally using the concept of validity, which in intuitive terms was characterized as being a scheme of 
"always computable" problems. As will be seen from the formal definition of validity given in Section 7, the 
exact meaning of a "problem" is a static — rather than any — game. 

All of the examples of winning strategies that we have seen so far shared one feature: for every position, 
the strategy had a strict prescription for a player regarding whether it should move or wait till the adversary 
makes a move. This might have given us the wrong illusion of being a common case, somehow meaning 
that static games, even when properly free, still can always be "adequately" modeled as strict games. Not 
really. Below is an example, borrowed from [12], of an inherently free static game. The winning strategy 
for it substantially takes advantage of the flexibility offered by the free-game approach: the fact that it 
is not necessary for a player to precisely know whether in a given position it needs to move or wait. Any 
attempt to model such a game as a strict game would signify counterfeiting the true essence of the interactive 
computational problem that it represents. 

Example 5.4 Let A(x, z) be a decidable arithmetical predicate such that the predicate \/zA{x, z) is un- 
decidable, and let B(x,y) be an undecidable arithmetical predicate. Consider the following computational 
problem: 

\lx(\ly(VzA{x,z) AB(x,y)) n \lzA(x,z) -> \/zA(x, z) A V~\yB(x, y)j . 

After _L specifies a value m for x, T will seemingly have to decide what to do: to watch or to think. 
The 'watch' choice is to wait till _L specifies a value k for y in the consequent, after which T can select the 
n-conjunct Y~\y (\/zA(m, z) A B(m, y)) in the antecedent and specify y as k in it, thus bringing the play down 
to the always-won elementary game Vz^4(m, z) A B(m, k) — > \/zA(m, z) A B(m, k). While being successful if 
VzA(m, z) is true, the watch strategy is a bad choice when \/zA(m, z) is false, for there is no guarantee that 
_L will indeed make a move in \~\yB(m, y), and if not, the game will be lost. When VzA(m, z) is false, the 
following 'think' strategy is successful: Start looking for a number n for which A(m, n) is false. This can be 
done by testing A(m, z), in turn, for z = 1, z = 2, ... After you find n, select the n-conjunct \~~\zA(m, z) in 
the antecedent, specify z as n in it, and you are the winner. The trouble is that if \/zA{m, z) is true, such 
a number n will never be found. Thus, which of the above two choices (watch or think) would be successful 
depends on whether Vz^4(m, z) is true or false, and since '^fzA(x 1 z) is undecidable, T has no effective way 
to make the right choice. Fortunately, there is no need to choose. Rather, these two strategies can be 
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pursued simultaneously: T starts looking for a number n which makes A(m, n) false and, at the same time, 
periodically checks if _!_ has made a move in \~\yB(m, y). If the number n is found before _L makes such a 
move, T continues as prescribed by the think strategy; if vice versa, T continues as prescribed by the watch 
strategy; finally if none of these two events ever occur, which, note, is only possible when \/zA(m, z) is true 
(for otherwise a number n falsifying A(m, n) would have been found), again T will be the winner. This is so 
because, just as in the corresponding scenario of the watch strategy, T will have won both of the conjuncts 
of the consequent. 

6 Winnability 

Now that we know what computational problems are, it is time to explain what computability, i.e. algorithmic 
solvability, i.e. existence of an algorithmic winning strategy exactly means. The definitions given in this 
section are semiformal. The omitted technical details are rather standard or irrelevant, and can be easily 
restored by anyone familiar with Turing machines. If necessary, the corresponding detailed definitions can 
be found in Part II of [12]. 

As we remember, the central point of our philosophy is to require that player T (here identified with its 
strategy) be implcmcntable as a computer program, with effective and fully determined behavior. On the 
other hand, the behavior of _!_, including its speed, can be arbitrary. This intuition is captured by the model 
of interactive computation where T is formalized as what we call HPM. 10 

An HPM Ti is a Turing machine which, together with an ordinary read/write work tape, has two addi- 
tional, read-only tapes: the valuation tape and the run tape. The presence of these two tapes is related to 
the fact that the outcome of a play over a given game depends on two parameters: (1) the valuation that 
tells us which instance of the game is played, and (2) the run that is generated in the play. Tt should have 
full access to information about these two parameters, and this information is provided by the valuation and 
run tapes: the former spells a (the "actual" ) valuation e by listing constants in the lexicographic order of the 
corresponding variables, and the latter spells, at any given time, the current position, i.e. the sequence of the 
(labeled) moves made by the two players so far. Thus, both of these two tapes can be considered input tapes. 
The reason for our choice to keep them separate is the difference in the nature of the input that they provide. 
Valuation is a static input, known at the very beginning of a computation/play and remaining unchanged 
throughout the subsequent process. On the other hand, the input provided by the run tape is dynamic: every 
time one of the players makes a move, the move (with the corresponding label) is appended to the content 
of this tape, with such content being unknown and hence blank at the beginning of interaction. Technically 
the run tape is read-only: the machine has unlimited read access to this (as well as to the valuation) tape, 
but it cannot write directly on it. Rather, H makes a move a by constructing it at the beginning of its work 
tape, delimiting its end with a blank symbol, and entering one of the specially designated states called move 
states. Once this happens, Tq is automatically appended to the current position spelled on the run tape. 
While the frequency at which the machine can make moves is naturally limited by its clock cycle time (the 
time each computation step takes), there are no limitations to how often the environment can make a move, 
so, during one computation step of the machine, any finite number of any moves by the environment can be 
appended to the content of the run tape. This corresponds to the earlier-pointed-out intuition that not only 
the strategy, but also the relative speed of the environment can be arbitrary. For technical clarity, we assume 
that the run tape remains stable during a clock cycle, and is updated only on a transition from one cycle to 
another. Specifically, where ($} is the position spelled on the run tape during a given cycle and a\,...,a n 
(possibly n — 0) is the sequence of the moves made by the environment during the cycle, the content of the 
run tape throughout the next cycle will be either ($, -Lai, • • • , -La„, T/3) or ($, _Lai, . . . , Ta n ), depending 
on whether the machine did or did not make a move /3 during the previous cycle. Such a transition is thus 
nondeterministic, with nondeterminism being related to the different possibilities for the above sequence 
oti,..., a n . 

A configuration of an HPM H is defined in the standard way: this is a full description of the ( "current" ) 
state of the machine, the locations of its three scanning heads and the contents of its tapes, with the exception 
that, in order to make finite descriptions of configurations possible, we do not formally include a description 

10 HPM stands for 'Hard-Play Machine'. See [12] for a (little long) story about why "hard". The name EPM for the other 
model defined shortly stands for "Easy-Play Machine" . 
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of the unchanging (and possibly essentially infinite) content of the valuation tape as a part of configuration, 
but rather account for it in our definition of computation branch as this will be seen below. The initial 
configuration is the configuration where H is in its start state and the work and run tapes are empty. A 
configuration C of TC is said to be an e-successor of configuration C if, when valuation e is spelled on 
the valuation tape, C can legally follow C in the standard sense, based on the transition function (which 
we assume to be deterministic) of the machine and accounting for the possibility of the above-described 
nondcterministic updates of the content of the run tape. An e-computation branch of H is a sequence 
of configurations of H where the first configuration is the initial configuration and each other configuration 
is an e-successor of the previous one. Thus, the set of all e-computation branches captures all possible 
scenarios (on valuation e) corresponding to different behaviors by _L. Each e-computation branch B of Ti. 
incrementally spells — in the sense that must be clear — a run T on the run tape, which we call the run 
spelled by B. 

Definition 6.1 For games A and B we say that: 

1. An HPM H wins A on a valuation e iff, whenever T is the run spelled by some e-computation 
branch of H, Wnf(r) = T. 

2. An HPM Tt (simply) wins A iff it wins A on every valuation. 

3. A is winnable iff there is an HPM that wins A. Such an HPM is said to be a solution for A. 

4. A is reducible to B iff B — > A is winnable. An HPM that wins B — > A is said to be a reduction of 
A to B. 

5. A and B arc equivalent iff A is reducible to B and vice versa. 

The HPM model of interactive computation seemingly strongly favors the environment in that the latter 
may be arbitrarily faster than the machine. What happens if we start limiting the speed of the environment? 
The answer is nothing as far as computational problems, i.e. static games, are concerned. The alternative 
model of computation called EPM takes the idea if limiting the speed of the environment to the extreme 
by always letting the machine to decide when the environment can move and when it should wait; yet, as it 
turns out, the EPM model yields the same class of winnable static games as the HPM model does. 

An EPM is a machine defined in the same way as an HPM, with the only difference that now the 
environment can (but is not obligated to) make a move only when the machine explicitly allows it to do so, 
the event called granting permission. Technically permission is granted by entering one of the specially 
designated states called permission states. The only requirement that the machine is expected to satisfy 
is that, as long as the adversary is playing legal, the machine should grant permission every once in a while; 
how long that "while" lasts, however, is totally up to the machine. This amounts to having full control over 
the speed of the adversary. 

The above intuition is formalized as follows. After correspondingly redefining the 'e-successor' relation — 
in particular, accounting for the condition that now a (one single) _L-labeled move may be appended to the 
contents of the run tape only when the machine is in a permission state — the concepts of an e-computation 
branch of an EPM, the run spelled by such a branch, etc. are defined in exactly the same way as for HPMs. 
We say that a computation branch B of an EPM is fair iff permission is granted infinitely many times in B. 

Definition 6.2 For a game A and an EPM £, we say that: 

f . £ wins A on a valuation e iff, whenever T is the run spelled by some e-computation branch B of £ , 
unless T is a _L-illegal run of e[A], B is fair and Wn^(r) = T. 

2. £ (simply) wins A iff it wins A on every valuation. 

We will be using the expressions {HPMs} and {EPMs} for the sets of all HPMs and all EPMs, respectively. 
The following fact, proven in [12] (Theorem 17.2), establishes equivalence between the two models of 
computation for static games: 

Theorem 6.3 There is an effective function f : {EPMs} — >{HPMs} such that, for every EPM £ and static 
game A (and valuation e), whenever £ wins A (on e), so does f{£). And vice versa: there is an effective 
function f : {HPMs} — >{EPMs} such that, for every HPMH and static game A (and valuation e), whenever 
TL wins A (on e), so does /(H). 
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The philosophical significance of this theorem is that it reinforces the belief according to which static 
games are games that allow us to make full abstraction from speed. Its technical importance is related 
to the fact that the EPM-model is much more convenient when it comes to describing interactive algo- 
rithms/strategies, as we will have a chance to see later. The two models also act as natural complements to 
each other: as shown in Section 20 of [12], we can meaningfully talk about the (uniquely determined) play 
between a given HPM and a given EPM, while this is impossible if both players are EPMs or both are HPMs. 
This fact has been essentially exploited in the completeness theorems for logic CL4 and its fragments proven 
in [13, 14, 17, 18], where environment's strategies for the games represented by unprovable formulas were 
described as EPMs and then it was shown that no HPM can win against such EPMs. 

In view of Theorem 6.3, winnability of a static game A can be equivalently defined as existence of an 
EPM (rather than HPM) that wins A. Since we are only concerned with static games, from now on we will 
treat either definition as an equally official definition of winnability. And we extend the usage of the terms 
solution and reduction (Definition 6.1) from HPMs to EPMs. For a static game A, valuation e and HPM 
or EPM M, we write 

MKA Mh^l and \= A 
to mean that M. wins A on valuation e, that M. (simply) wins A and that A is winnable, respectively. Also, 
we will be using the terms "computable" or "algorithmically solvable" as synonyms of "winnable" . 

One might guess that, just as the ordinary Turing machine model, our HPM and EPM models are highly 
rigid with respect to reasonable technical variations. For example, the models where only environment's 
moves are visible to the machine yield the same class of winnable static games. Similarly, there is no difference 
between whether we allow the scanning heads on the valuation and run tapes to move in either or only one 
(left to right) direction. Another variation is the one where an attempt by either player to make an illegal 
move has no effect: such moves are automatically rejected and/or filtered out by some interface hardware 
or software and thus illegal runs are never generated. Obviously in such a case a minimum requirement 
would be that the question of legality of moves be decidable (which is indeed "very easily decidable" for 
naturally emerging games, including all games from the closure of the set of predicates under all of our game 
operations). This again yields models equivalent to HPM and/or EPM. 

7 Validity 

While winnability is a property of games, validity is a property of logical formulas, meaning that the formula 
is a scheme of winnable static games. To define this concept formally, we need to agree on a formal language 
first. It is going to be an extension of the language of classical predicate calculus without identity or functional 
symbols. Our language is more expressive than the latter not only because it has non-classical operators 
in it such as n,o etc., but also due to the fact that we now have two sorts of atoms: elementary and 
general. Elementary atoms represent elementary games, i.e. predicates, while general atoms represent any 
computational problems, i.e. any (not-necessarily-elementary) static games. The point is that elementary 
problems are interesting and meaningful in their own right, and validate principles that may not be valid in 
the general case. We want to be able to analyze games at a reasonably fine level, which is among the main 
reasons for our choice to have the two sorts of atoms in the language. 

More formally, for each integer n > 0, our language has infinitely many n-ary elementary letters and 
n-ary general letters. Elementary letters are what is called predicate letters in ordinary logic. We will 
consistently use the lowercase p, q, r, s as metavariables for elementary letters, and the uppercase P, Q, R, S 
as metavariables for general letters. A nonlogical atom is L(t\, . . . ,t n ), where L is an n-ary elementary 
or general letter, and each £, is a term, i.e. one of the variables V\,V2,V3, ... or one of the constants 
1, 2,3,.. .. Such an atom L(t\, . . . , t n ) is said to be i-based. When L is 0-ary, the only L-based atom will 
be usually written as L rather than L(). An L-based atom is said to be elementary, general, n-ary, etc. if 
L is so. We also have two logical atoms T and _L. Formulas are constructed from atoms and variables 
in the standard way applying to them the unary connectives -1, A, Y, o, ?, the binary connectives — >, >- , o— , 
the variable- (> 2) arity connectives A, V, U, and the quantifiers V, 3, U, A, V. Throughout the rest 
of this paper, unless otherwise specified, "formula" will always mean a formula of this language, and letters 
E,F,G,H will be used as metavariables for formulas. We also continue using x,y,z as metavariables for 
variables, c for constants and t for terms. 
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The definitions of a bound occurrence and a free occurrence of a variable are standard. They extend from 
variables to all terms by stipulating that an occurrence of a constant is always free. When an occurrence of 
a variable x is within the scope of Qx for several quantifiers Q, then x is considered bound by the quantifier 
"nearest" to it. For instance, the occurrence of x within Q(x,y) in Vx(P(x) V \~~\xAyQ(x, y)) is bound by 
\~~\x rather than Vx, for the latter is overridden by the former. An occurrence of a variable that is bound by 
Vx or 3x is said to be blindly bound. 

In concordance with a similar notational practice established earlier for games, sometimes we represent 
a formula F as F(xi, . . . ,x„), where the Xi are pairwise distinct variables. In the context set by such a 
representation, F(ti, . . . ,t n ) will mean the result of simultaneously replacing in F all free occurrences of 
each variable X{ (1 < i < n) by term U. In case each i, is a variable yi, it may be not clear whether 
F(x\, . . . , x n ) or F(yi, . . . , y n ) was originally meant to represent F in a given context. Our disambiguating 
convention is that the context is set by the expression that was used earlier. That is, when we first mention 
F{x\, . . . , x n ) and only after that use the expression F(yi, . . . , y n ), the latter should be understood as the 
result of replacing variables in the former rather than vice versa. It should be noted that, when representing 
F as F(x\, . . . ,x n ), we do not necessarily mean that exactly the variables that have free 

occurrences in F. 

An interpretation is a function * that sends each n-ary elementary (resp. general) letter L to an 
elementary (resp. static) game with a fixed attached n-tuple x\, . . . , x n of variables. We denote such a game 
by L*(x\, . . . , x n ), and call the tuple (x 1; . . . , x n ) the canonical tuple of L*. When we do not care about 
the canonical tuple, simply L* can be written instead of L*(x\, . . . , x n ). According to our earlier conventions, 
X\, . . . , x n have to be neither all nor the only variables on which the game L* = L*(x\, . . . , x n ) depends; in 
fact, L* does not even have to be finitary here. The canonical tuple is only used for setting a context, in 
which L*(t\, . . . , t n ) can be conveniently written later for L*(x\/t\, . . . , x n /t n ). This eliminates the need to 
have a special syntactic construct in the language for the operation of substitution of variables. 

Interpretations are meant to turn formulas into games. Not every interpretation is equally good for 
every formula though, and some precaution is necessary to avoid confusing collisions of variables, as well 
as to guarantee that Vx, 3x are only applied to games for which they are defined, i.e. games unistructural 
in x. For this reason, we restrict interpretations to "admissible" ones. We say that an interpretation * is 
admissible for a formula F, or simply is ^-admissible iff, for every n-ary (general or elementary) letter 
L occurring in F, the following two conditions are satisfied: 

(i) L* does not depend on any variables that are not among its canonical tuple but occur in F. 

(ii) If the ith (1 < i < n) term of an occurrence of an L-based atom in F is blindly bound, then L* is 

unistructural in the ith variable of its canonical tuple. 

Every interpretation * extends from letters to formulas for which * is admissible in the obvious way: 

• where L is an n-ary letter with L* = L*(xi, . . . , x n ) and ti, . . . , t n are any terms, (L(ti, . . . , t n ))* = 
L*(t\, . . . , t n ); 

• * respects the meanings of logical operators (including logical atoms as 0-ary operators) as the cor- 
responding game operations; that is: T* = T; (-.£)* = ->(G*); (G n H)* = (G*) n (H*); 
(VxG)* = Vx(G*); etc. 

When F* = A, we say that * interprets F as A, and that F* is an interpretation of F. 

Notice that condition (ii) of admissibility is automatically satisfied when L is an elementary letter, because 
an elementary problem (i.e. L*) is always unistructural and hence unistructural in all variables. In most 
typical cases we will be interested in interpretations * where L* is unistructural and does not depend on any 
variables other than those of its canonical tuple, so that both conditions (i) and (ii) will be automatically 
satisfied. With this remark in mind and in order to relax terminology, henceforth we may sometimes omit 
".F-admissible" and simply say "interpretation"; every time an expression F* is used in a context, it should 
be understood that the range of * is restricted to F-admissible interpretations. 

Definition 7.1 We say that a formula F is valid — and write \hF — iff, for every F-admissible interpre- 
tation *, the game F* is winnable. 
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The main technical goal of CL at this stage of its development is to find axiomatizations for the set of 
valid formulas or various nontrivial fragments of that set. A considerable progress has already been achieved 
in this direction; more is probably yet to come in the future. 

8 Uniform validity 

If we disabbreviate U F* is winnable" as 3M(M \= F*), validity in the sense of Definition 7.1 can be written as 
\/*3Ai(A4 \= F*), where Ai ranges over HPMs or EPMs, and * over inadmissible interpretations. Reversing 
the order of quantification yields the following stronger property of uniform validity: 

Definition 8.1 We say that a formula F is uniformly valid — and write t-F — iff there is an HPM or 
(equivalently) EPM Ai such that, for every inadmissible interpretation *, Ai \= F* . 

Such an HPM or EPM Ai is said to be a uniform solution for F, and AifhF is written to express that 
Ai is a uniform solution for F. 

Intuitively, a uniform solution Ai for a formula F is an interpretation-independent winning strategy: 
since, unlike valuation, the "intended" or "actual" interpretation * is not visible to the machine, Ai has to 
play in some standard, uniform way that would be successful for any possible interpretation of F. 

The term "uniform" is borrowed from [1] as this understanding of validity in its spirit is close to that in 
Abramsky and Jagadeesan's tradition. The concepts of validity in Lorcnzen's [29] tradition, or in the sense 
of Japaridze [10, 11], also belong to this category. Common to those uniform- validity-style notions is that 
validity there is not defined as being "always true" (true=winnable) as this is the case with the classical 
understanding of this concept; in those approaches the concept of truth is often simply absent, and validity 
is treated as a basic concept in its own rights. As for simply validity, it is closer to validities in the sense of 
Blass [4] or Japaridze [9] , and presents a direct generalization of the corresponding classical concept in that 
it indeed means being "true" in every particular setting. 

Which of our two versions of validity is more interesting depends on the motivational standpoint. It is 
validity rather than uniform validity that tells us what can be computed in principle. So, a computability- 
theoretician would focus on validity. Mathematically, non- validity is generally by an order of magnitude more 
informative — and correspondingly harder to prove — than non-uniform- validity. Say, the non-validity of 
pU^p means existence of solvable-in-principle yet algorithmically unsolvable problems 11 — the fact that 
became known to the mankind only as late as in the 20th century. As for the non-uniform- validity of p U -ip, 
it is trivial: of course there is no way to choose one of the two disjuncts that would be true for all possible 
values of p because, as the Stone Age intellectuals were probably aware, some p are true and some are false. 

On the other hand, it is uniform validity rather than validity that is of interest in more applied areas 
of computer science such as knowledgebase systems or systems for planning and action (see Section 10). In 
this sort of applications we want a logic on which a universal problem-solving machine can be based. Such 
a machine would or should be able to solve problems represented by logical formulas without any specific 
knowledge of the meanings of their atoms, i.e. without knowledge of the actual interpretation. Remembering 
what was said about the intuitive meaning of uniform validity, this concept is exactly what fits the bill. 

Anyway, the good news is that the two concepts of validity appear to yield the same logic. This has 
been conjectured for the full language of CL in [12] (Conjecture 26.2), and by now, as will be seen from 
our Theorem 9.5, successfully verified for the rather expressive fragment of that language — the language of 
logic CL4. 

11 Well, saying so is only accurate with the Strong Completeness clause of Theorem 9.4 (which, as conjectured in [12], extends 
from CL4 to any other complete fragments of CL) in mind, according to which the non-validity of p U -^p implies the existence 
of a finitary predicate A for which A U -iA has no algorithmic solution. As will be pointed out in a comment following Theorem 
9.4, without the finitarity restriction, a machine may fail to win A U ^A not (only) due to the fundamental limitations of 
algorithmic methods, but rather due to the fact that it can never finish reading all necessary information from the valuation 
tape to determine the truth status of A. 
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9 Logic CL4 



The language of logic CL4 is the fragment of the language of Section 7 obtained by forbidding the parallel 
group of quantifiers and the recurrence group of propositional connectives. This leaves us with the operators 
-i, A, V, — U, V, 3, I - !, U, along with the logical atoms T, _L and the two sorts (elementary and general) 
of nonlogical atoms. Furthermore, for safety and without loss of expressive power, we agree that a formula 
cannot contain both bound and free occurrences of the same variable. We refer to the formulas of this 
language as CL4-formulas. 

Our axiomatization of CL4 employs the following terminology. Understanding F — > G as an abbreviation 
for -^F V G, a positive (resp. negative) occurrence of a subformula is one that is in the scope of an even 
(resp. odd) number of occurrences of -i. A surface occurrence of a subformula is an occurrence that is not 
in the scope of any choice operators. A CL4-formula not containing general atoms and choice operators — i.e. 
a formula of the language of classical first-order logic — is said to be elementary. The elementarization 
of a CL4-formula F is the result of replacing in F all surface occurrences of each subformula of the form 
d U . . . U G n or UxG by _L, all surface occurrences of each subformula of the form G\ l~l . . . I~l G n or \~~\xG 
by T, all positive surface occurrences of each general atom by _L, and all negative surface occurrences of 
each general atom by T. A CL4-formula is said to be stable iff its elementarization is classically valid, i.e. 
provable in classical predicate calculus. Otherwise it is instable. 

With V i— > C meaning "from premise (s) V conclude C" , logic CL4 is given by the following four rules 
where, as can be understood, both the premises and the conclusions range over CL4-formulas: 

A H i— > E, where E is stable and if is a set of formulas satisfying the following conditions: 

(i) Whenever E has a positive (resp. negative) surface occurrence of a subformula G\ l~l . . . n G n (resp. 

d U . . . U G n ), for each is{l,...,n}, H contains the result of replacing that occurrence in E by 

Gi\ 

(ii) Whenever E has a positive (resp. negative) surface occurrence of a subformula Y~\xG{x) (resp. 
UxG(xj), H contains the result of replacing that occurrence in E by G(y) for some variable y 
not occurring in E. 

Bl H E, where H is the result of replacing in E a negative (resp. positive) surface occurrence of a 
subformula G\ l~l . . . n G n (resp. G\ U . . . U G n ) by G, for some i G {1, . . . , n}. 

B2 H E, where H is the result of replacing in E a negative (resp. positive) surface occurrence of a 
subformula Y~\xG{x) (resp. UxG(x)) by G(t) for some term t such that (if t is a variable) neither the 
above occurrence of \~~\xG(x) (resp. UxG(x)) in E nor any of the free occurrences of x in G(x) are in 
the scope of Vi, 3t, I It or Lit. 

C H i— > E, where H is the result of replacing in E two — one positive and one negative — surface 
occurrences of some n-ary general letter by an n-ary elementary letter that does not occur in E. 

Axioms are not explicitly stated, but note that the set of premises of Rule A sometimes can be empty, 
in which case the conclusion acts as an axiom. Looking at a few examples should help us get a syntactic feel 
of this most unusual deductive system. 

The following is a CL4-proof of \~\xUy( y P(x) — > P{y)): 

1. p(z) — > p(z) (from {} by Rule A); 

2. P{z) -> P(z) (from 1 by Rule C); 

3. Uy {P{z) P(y)) (from 2 by Rule B2); 

4. \lxL\y(P(x) P(y)) (from {3} by Rule A). 

On the other hand, CL4 \f \AyY\x{P(x) — ► P{y)). Indeed, obviously this instable formula cannot be 
the conclusion of any rule but B2. If it is derived by this rule, the premise should be \~\x(P(x) — ► P(t)) for 
some term t different from x. Y~\x{P{x) — ► P{t)), in turn, could only be derived by Rule A where, for some 
variable z different from t, P(z) — ► P(t) is a (the) premise. The latter is an instable formula and does not 
contain choice operators, so the only rule by which it can be derived is C, where the premise is p(z) — ► p(t) 
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for some elementary letter p. Now we deal with a classically non-valid and hence instable elementary formula, 
and it cannot be derived by any of the four rules of CL4. 

Note that, in contrast, the "blind version" 3yVx(P(x) -> P(y)) of Uy\lx(P(x) -> P(y)) is provable: 

1. 3yix{p(x) — > (from {} by Rule A); 

2. 3yVa;(P(a;) -» P(y)) (from 1 by Rule C). 

'There is y such that, for all x, P(x) — > P (y)' is true yet not in a constructive sense, thus belonging to 
the kind of principles that have been fueling controversies between the classically- and constructivistically- 
minded. As noted in Section 1, computability logic is offering a peaceful settlement, telling the arguing 
parties: "There is no need to fight at all. It appears that you simply have two different concepts of 1 there 
is' /'/or aW. So, why not also use two different names: 3/V and U/n. Yes, 3yVx(P(x) -> P(y)) is indeed 
right; and yes, \-\y[~\x(P(x) — > P(y)) is indeed wrong." Clauses 1 and 2 of Exercise 9.1 illustrate a similar 
solution for the law of the excluded middle, the most controversial principle of classical logic. 

The above-said remains true with p instead of P, for what is relevant there is the difference between the 
constructive and non-constructive versions of logical operators rather than how atoms are understood. Then 
how about the difference between the elementary and non-elementary versions of atoms? This distinction 
allows computability logic to again act in its noble role of a reconciliator/integrator, but this time between 
classical and linear logics, telling them: "It appears that you have two different concepts of the objects that 
logic is meant to study. So, why not also use two different sorts of atoms to represent such objects: elementary 
atoms p,q,-- ., and general atoms P,Q, . . .. Yes, p — > p A p is indeed right; and yes, P — > P A P (Exercise 
9.1(4)) is indeed wrong". However, as pointed out in Section 1, the term "linear logic" in this context should 
be understood in a very generous sense, referring not to the particular deductive system proposed by Girard 
but rather to the general philosophy and intuitions traditionally associated with it. The formula of clause 
3 of the following exercise separates CL4 from linear logic. That formula is provable in affine logic though. 
Switching to affine logic, i.e. restoring the deleted (from classical logic) rule of weakening, does not however 
save the case: the CL4-provable formulas of clauses 10, 11 and 18 of the exercise are provable in neither 
linear nor affine logics. 

Exercise 9.1 In clauses 14 and 15 below, " CL4 h E P" stands for " CL4 h E -> P and CL4 h P -> E" . 
Verify that: 

1. CL4h PVnP. 

2. CL4 \/PU->P. Compare with 1. 

3. CL4hPAP^P. 

4. CL4 \f P -> P A P. Compare with 3,5. 

5. CL4hP^PnP. 

6. CL4h (P U Q) A (P U P) ^PU(QAP). 

7. CL4 \f P U (Q A R) -> (P U Q) A (P U R). Compare with 6,8. 

8. CL4 h p U (Q AR) -> (p UQ) A (p UP). 

9. CL4 \f p n (Q A R) -> (p n Q) A (p n P). Compare with 8. 

10. CL4 h (P A P) V (P A P) (P V P) A (P V P). 

11. CL4 h (P a (P n S 1 )) n (Q a (P n S 1 )) n ((P n Q) a r) n ((P n Q) a S) -» 

(PnQ) A(PnS'). 

12. CL4 h VxP(x) 

13. CL4 \f \lxP(x) WxP(x). Compare with 12. 

14. CL4 h 3xP(x) n 3xQ(x) ^ 3x(P(x) n Q(x)) . 

Similarly for U instead of and/or V instead of 3. 

15. CL4 h r\x3yP{x, y) ^ 3y\lxP(x, y). 

Similarly for U instead of \~\, and/or V instead of 3. 

16. CL4 h Vi(P(a) A Q(x)) -» VxP(x) A VxQ(x). 
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17. CL4 \f \lx(P(x) A Q(x)) -> \lxP(x) A \lxQ(x). Compare with 16. 

18. CL4 h ria;((P(a;) A \lxQ(x)) n (HxP(x) A Q(z))) -► 

ria;P(a;) A ria;Q(x). 

19. CL4 h formula (3) of Section 4.4. 

20. CL4 1/ formula (4) of Section 4.4. Compare with 19. 

Taking into account that classical validity and hence stability is recursively enumerable, from the way 
CL4 is axiomatized it is obvious that the set of theorems of CL4 is recursively enumerable. Not so obvious, 
however, may be the following theorem proven in [18]. As it turns out, the choice/constructive quantifiers 
n,u are much better behaved than their blind/classical counterparts V, 3, yielding a decidable first-order 
logic: 

Theorem 9.2 The V, 3- free fragment of (the set of theorems of) CL4 is decidable. 

Next, based on the straightforward observation that elementary formulas are derivable in CL4 (in par- 
ticular, from the empty set of premises by Rule A) exactly when they are classically valid, we have: 

Theorem 9.3 CL4 is a conservative extension of classical predicate logic: the latter is nothing but the 
elementary fragment (i.e. the set of all elementary theorems) of the former. 

Remember that a predicate A is said to be of arithmetical complexity A2 iff A = 3x\/yB\ and -^A = 
3xVyB2 for some decidable predicates B\ and B2. 

The following Theorem 9.4 is the strongest soundness and completeness result known so far in com- 
putability logic. Its proof has taken about half of the volume of [17] and almost entire [18]. A similar 
theorem for the propositional version CL2 of CL4 was proven in [13]- [14]. 

Theorem 9.4 CL4 h F iff F is valid (any CLA-formula F). Furthermore: 

Uniform-Constructive Soundness: There is an effective procedure that takes a ChA-proof of an 
arbitrary C~LA-formula F and constructs a uniform solution for F . 

Strong Completeness: If a CLA-formula F is not provable in CL4 ; then F* is not computable for 
some F -admissible interpretation * that interprets all elementary atoms as finitary predicates of arithmetical 
complexity A2, and interprets all general atoms as n, U- combinations of finitary predicates of arithmetical 
complexity A 2 . 

A non-finitary game generally depends on infinitely many variables, and appealing to this sort of games 
in a completeness proof could seriously weaken such a result: the reason for incomputability of a non-finitary 
game could be just the fact that the machine can never finish reading all the relevant information from 
its valuation tape. Fortunately, in view of the Strong Completeness clause, it turns out that the question 
whether non-finitary games are allowed or not has no effect on the (soundness and) completeness of CL4; 
moreover, finitary games can be further restricted to the sort as simple as U-combinations of finitary 
predicates. 

Similarly, the Uniform-Constructive Soundness clause dramatically strengthens the soundness result for 
CL4 and, as will be argued in the following section, opens application areas far beyond logic or the pure 
theory of computation. First of all, notice that it immediately implies a positive verification of the earlier- 
mentioned Conjecture 26.2 of [12] restricted to the language of CL4, according to which validity and uniform 
validity are extensionally equivalent. Indeed, if a CL4-formula F is uniformly valid, then it is automatically 
also valid, as uniform validity is stronger than validity. Suppose now F is valid. Then, by the completeness 
part of Theorem 9.4, CL4 h F. But then, by the Uniform-Constructive Soundness clause, F is uniformly 
valid. Thus, we have: 

Theorem 9.5 A CL4-formula is valid if and only if it is uniformly valid. 
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But CL4 is sound in an even stronger sense. Knowing that a solution for a given problem exists might be 
of little practical importance without being able to actually find such a solution. No problem: according to 
the Uniform-Constructive Soundness clause, a uniform solution for a CL4-provable formula F automatically 
comes with a CL4-proof of F. The earlier-mentioned soundness theorem for Heyting's intuitionistic calculus 
proven in [19] comes in the same uniform-constructive form, and so does the soundness theorem for affinc 
logic (Theorem 11.1) proven later in this paper. 

10 Applied systems based on CL 

The original motivations behind CL were computability-theoretic: the approach provides a systematic answer 
to the question 'what can be computed?', which is a fundamental question of computer science. Yet, the 
above discussion of the uniform-constructive nature of the known soundness theorems for various fragments 
of CL reveals that the CL paradigm is not only about what can be computed. It is equally about how 
problems can be computed/solved, suggesting that CL should have potential utility, with its application 
areas not limited to the theory of computation. In the present section we will briefly examine why and how 
CL is of interest in some other fields of study, specifically, knowledgebase systems and constructive applied 
theories. 

The reason for the failure of pLHp as a computability-theoretic principle is that the problem represented by 
this formula may have no effective solution — that is, the predicate p* may be undecidable. The reason why 
this principle would fail in the context of knowledgebase systems, however, is much simpler. A knowledgebase 
system may fail to solve the problem Female(Dana) U ^Female (Dana) not because the latter has no effective 
solution (of course it has one), but because the system simply lacks sufficient knowledge to determine 
Dana's gender. On the other hand, any system would be able to "solve" the problem Female(Dana) V 
-^Female (Dana) as this is an automatically won elementary game so that there is nothing to solve at all. 
Similarly, while Vj/3x Father -(x, y) is an automatically solved elementary problem expressing the almost 
tautological knowledge that every person has a father, ability to solve the problem V^yVAx Father (x, y) implies 
the nontrivial knowledge of everyone's actual father. Obviously the knowledge expressed by AUB or Ua;A(a:) 
is generally stronger than the knowledge expressed by A V B or 3xA(x), yet the formalism of classical logic 
fails to capture this difference — the difference whose relevance hardly requires any explanation. The 
traditional approaches to knowledgebase systems ([27, 28, 31] etc.) try to mend this gap by augmenting 
the language of classical logic with special epistemic constructs, such as the modal "know that" operator 
□, after which probably DA V CIS would be suggested as a translation for A U B and Vy3xQ4(a;, y) for 
\^\y\AxA(x,y). Leaving it for the philosophers to argue whether, say, ~tfy3xDA(x,y) really expresses the 
constructive meaning of n^/Lla^ai, y), and forgetting that epistemic constructs often yield unnecessary and 
very unpleasant complications such as messiness and non-semidccidability of the resulting logics, some of 
the major issues still do not seem to be taken care of. Most of the actual knowledgebase and information 
systems are interactive, and what we really need is a logic of interaction rather than just a logic of knowledge. 
Furthermore, a knowledgebase logic needs to be resource- conscious. The informational resource expressed 
by \~~\x (Female (x) U ^Female(x)) is not as strong as the one expressed by \~~\x (Female (x) U ^Female(x)) A 
\~\x(Female(x) U ^Female(x)): the former implies the resource provider's commitment to tell only one (even 
though an arbitrary one) person's gender, while the latter is about telling any two people's genders. A 
reader having difficulty in understanding why this difference is relevant, may try to replace Female (x) with 
Acid(x), and then think of a (single) piece of litmus paper. Neither classical logic nor its standard epistemic 
extensions have the ability to account for such differences. But CL promises to be adequate. It is a logic 
of interaction, it is resource-conscious, and it does capture the relevant differences between truth and actual 
ability to find/compute/know truth. 

When CL is used as a logic of knowledgebases, its formulas represent interactive queries. A formula 
whose main operator is U or U can be understood as a question asked by the user, and a formula whose 
main operator is n or 11 as a question asked by the system. Consider the problem \~\xUyHas(x, y), where 
Has(x,y) means "patient x has disease y" (with Healthy counting as one of the possible "diseases"). This 
formula is the following question asked by the system: "Who do you want me to diagnose?" The user's 
response can be "Dana". This move brings the game down to UyHas(Dana,y). This is now a question 
asked by the user: "What does Dana have?" . The system's response can be "flu" , taking us to the terminal 
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position Has (Dana, Flu). The system has been successful iff Dana really has a flu. 

Successfully solving the above problem \~~\xUyHas(x,y) requires having all relevant medical information 
for each possible patient, which in a real diagnostic system would hardly be the case. Most likely, such a 
system, after receiving a request to diagnose x, would make counterqueries regarding x's symptoms, blood 
pressure, test results, age, gender, etc., so that the query that the system will be solving would have a higher 
degree of interactivity than the two-step query \~\x\-\yHas(x, y) does, with questions and counterquestions 
interspersed in some complex fashion. Here is when other computability-logic operations come into play, -i 
turns queries into counterqueries; parallel operations generate combined queries, with — > acting as a query 
reduction operation; i, k allow repeated queries, etc. Here we are expanding our example. Let Sympt(x,s) 
mean "patient x has (set of) symptoms s", and Pos(x,t) mean "patient x tests positive for test t" . Imagine 
a diagnostic system that can diagnose any particular patient x, but needs some additional information. 
Specifically, it needs to know x's symptoms; plus, the system may require to have x taken a test t that it 
selects dynamically in the course of a dialogue with the user depending on what responses it received. The 
interactive task/query that such a system is performing/solving can then be expressed by the formula 

r\x(\JsSympt(x,s) A\~\t(Pos(x,t)\J-iPos(x,t)) ^UyHas(x,yfj. (6) 

A possible scenario of playing the above game is the following. At the beginning, the system waits until the 
user specifies a patient x to be diagnosed. We can think of this stage as systems's requesting the user to 
select a particular (value of) x, remembering that the presence of ria: automatically implies such a request. 
After a patient x — say x — X — is selected, the system requests to specify X's symptoms. Notice that our 
game rules make the system successful if the user fails to provide this information, i.e. specify a (the true) 
value for s in UsSympt(X, s). Once a response — say, s — S — is received, the system selects a test t = T 
and asks the user to perform it on X, i.e. to choose the true disjunct of Pos(X,T) U ^Pos(X,T). Finally, 
provided that the user gave correct answers to all counterqueries (and if not, the user has lost), the system 
makes a diagnostic decision, i.e. specifies a value Y for y in UyHas(X, y) for which Has(X 1 Y) is true. 

The presence of a single "copy" of \~\t(Pos(x,t) U —iPos(x,t)} in the antecedent of (6) means that the 
system may request testing a given patient only once. If n tests were potentially needed instead, this would 
be expressed by taking the A-conjunction of n identical conjuncts Y~\t{Pos(x,t) \J^Pos(x,t)) . And if the 
system potentially needed an unbounded number of tests, then we would write k\~~\t(Pos(x, t) U ^Pos(x, t)) , 
thus further weakening (6) : a system that performs this weakened task is not as good as the one performing 
(6) as it requires stronger external (user-provided) informational resources. Replacing the main quantifier 
\~\x by Vx, on the other hand, would strengthen (6), signifying the system's ability to diagnose a patent 
purely on the basis of his/her symptoms and test result without knowing who the patient really is. However, 
if in its diagnostic decisions the system uses some additional information on patients such their medical 
histories stored in its knowledgebase and hence needs to know the patient's identity, \~~\x cannot be upgraded 
to Vx. Replacing \~~\x by Ax would be a yet another way to strengthen (6), signifying the system's ability 
to diagnose all patients rather than any particular one; obviously effects of at least the same strength would 
be achieved by just prefixing (6) with A or J>. 

As we just mentioned system's knowledgebase, let us make clear what it means. Formally, this is a 
finite A-conjunction KB of formulas, which can also be thought of as the (multi)set of its conjuncts. We call 
the elements of this set the internal informational resources of the system. Intuitively, KB represents 
all of the nonlogical knowledge available to the system, so that (with a fixed built-in logic in mind) the 
strength of the former determines the query-solving power of the latter. Conceptually, however, we do not 
think of KB as a part of the system properly. The latter is just "pure", logic-based problem-solving software 
of universal utility that initially comes to the user without any nonlogical knowledge whatsoever. Indeed, 
built-in nonlogical knowledge would make it no longer universally applicable: Dana can be a female in the 
world of one potential user while a male in the world of another user, and VxVy(x x y — y x x) can be false 
to a user who understands x as Cartesian rather than number-theoretic product. It is the user who selects 
and maintains KB for the system, putting into it all informational resources that (s)he believes are relevant, 
correct and maintainable. Think of the formalism of CL as a highly declarative programming language, and 
the process of creating KB as programming in it. 

The knowledgebase KB of the system may include atomic elementary formulas expressing factual knowl- 
edge, such as Female (Dana), or non-atomic elementary formulas expressing general knowledge, such as 
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V x(3y Father (x,y) — > MaZe(x)) or VxVy(x x (y + 1) = (x x y) + x); it can also include nonclassical formulas 
such as o^~\x(Female(x)\JMale(x)) , expressing potential knowledge of everyone's gender, or o\~\xL\y(x 2 = y), 
expressing ability to repeatedly compute the square function, or something more complex and more interac- 
tive, such as formula (6). With each resource R &KB is associated (if not physically, at least conceptually) 
its provider — an agent that solves the query R for the system, i.e. plays the game R against the system. 
Physically the provider could be a computer program allocated to the system, or a network server having 
the system as a client, or another knowledgebase system to which the system has querying access, or even 
human personnel servicing the system. E.g., the provider for b\~\x\-lyBloodpressure(x, y) would probably 
be a team of nurses repeatedly performing the task of measuring the blood pressure of a patient specified 
by the system and reporting the outcome back to the system. Again, we do not think of providers as a 
part of the system itself. The latter only sees what resources are available to it, without knowing or caring 
about how the corresponding providers do their job; furthermore, the system does not even care whether the 
providers really do their job right. The system's responsibility is only to correctly solve queries for the user 
as long as none of the providers fail to do their job. Indeed, if the system misdiagnoses a patient because 
a nurse-provider gave it wrong information about that patient's blood pressure, the hospital (ultimate user) 
is unlikely to fire the system and demand refund from its vendor; more likely, it would fire the nurse. Of 
course, when R is elementary, the provider has nothing to do, and its successfully playing R against the 
system simply means that R is true. Note that in the picture that we have just presented, the system plays 
each game R &KB in the role of _L, so that, from the system's perspective, the game that it plays against 
the provider of R is ->R rather than R. 

The most typical internal informational resources, such as factual knowledge or queries solved by computer 
programs, can be reused an arbitrary number of times and with unlimited branching capabilities, i.e. in the 
strong sense captured by A, and thus they would be prefixed with a A as we did with \~~\x(Female(x)UMale(x)) 
and nxUy(x 2 = y). There was no point in A-prcfixing Female (Dana), V x(3y Father (x,y) — ► Male(x)) or 
VxVy(x x (y + 1) = (x x y) + x) because every elementary game A is equivalent to oA and hence remains 
"recyclable" even without recurrence operators. As noted in Section 4.6, there is no difference between A 
and A as long as "simple" resources such as nxl_ly(x 2 = y) are concerned. However, in some cases — say, 
when a resource with a high degree of interactivity is supported by an unlimited number of independent 
providers each of which however allows to run only one single "session" — the weaker operator A will have 
to be used instead of A- Yet, some of the internal informational resources could be essentially non-reusable. 
A single provider possessing a single item of disposable pregnancy test device would apparently be able to 
support the resource \~~\x(Pregnant(x) U ^Pregnant(x)) but not AHx (Pregnant (x) U ^F 'regnant (x)) and not 
even \~~\x (Pregnant (x) U -^F 'regnant (x)) A Fix (Pregnant (x) U -i Pregnant (x)) . Most users, however, would 
try to refrain from including this sort of a resource into KB, and rather make it a part (antecedent) of 
possible queries. Indeed, knowledgebases with non-recyclable resources would tend to weaken from query to 
query and require more careful maintainancc and updates. Whether recyclable or not, all of the resources 
of KB can be used independently and in parallel. This is exactly what allows us to identify KB with the 
A-conjunction of its elements. 

Assume KB= Ri A . . . A R n , and let us now try to visualize a system solving a query F for the user. 
The designer would probably select an interface where the user only sees the moves made by the system 
in F, and hence gets the illusion that the system is just playing F. But in fact the game that the system 
is really playing is KB^ F, i.e. — V ... V ~^R n V F. Indeed, the system is not only interacting with 
the user in F, but — in parallel — also with its resource providers against whom, as we already know, it 
plays ->Ri, . . . , _| i?n- As long as those providers do not fail to do their job, the system loses each of the 
games ->i?i, . . . , ->R n - Then our semantics for V implies that the system wins its play over the "big game" 
->Ri V ... V -iii„ V F if and only if it wins it in the F component, i.e. successfully solves the query F. 

Thus, the system's ability to solve a query F reduces to its ability to generate a solution for KB — > F, 
i.e. a reduction of F to KB. What would give the system such an ability is built-in knowledge of CL - 
in particular, a uniform-constructively sound axiomatization of it, by which we mean a deductive 
system S (with effective proofs of its theorems) that satisfies the Uniform-Constructive Soundness clause of 
Theorem 9.4 with "S" in the role of CL4. According to the uniform-constructive soundness property, it 
would be sufficient for the system to find a proof of KB— > F, which would allow it to (effectively) construct 
a machine M and then run it on KB—* F with a guaranteed success. 
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Notice that it is uniform-constructive soundness rather than simple soundness of the the built-in (axiom- 
atization of the) logic that allows the knowledgebase system to function. Simple soundness just means that 
every provable formula is valid. This is not sufficient for two reasons. 

One reason is that validity of a formula E only implies that, for every interpretation *, a solution for the 
problem E* exists. It may be the case, however, that different interpretations require different solutions, 
so that choosing the right solution requires knowledge of the actual interpretation, i.e. the meaning, of 
the atoms of E. Our assumption is that the system has no nonlogical knowledge, which, in more precise 
terms, means nothing but that it has no knowledge of the interpretation *. Thus, a solution that the system 
generates for E* should be successful for any possible interpretation *. In other words, it should be a uniform 
solution for E. This is where uniform-constructive soundness of the underlying logic becomes critical, by 
which every provable formula is not only valid, but also uniformly valid. Going back to the example with 
which this section started, the reason why pU ^p fails in the context of computability theory is that it is not 
valid. On the other hand, the reason for the failure of this principle in the context of knowledgebase systems 
is that it is not uniformly valid: a solution for it, even if such existed for each interpretation *, would depend 
on whether p* is true or false, and the system would be unable to figure out the truth status of p* unless 
this information was explicitly or implicitly contained in KB. Thus, for knowledgebase systems the primary 
semantical concept of interest is uniform validity rather than validity. 

The other reason why simple soundness of the built-in logic would not be sufficient for a knowledgebase 
system to function — even if every provable formula was known to be uniformly valid — is the following. 
With simple soundness, after finding a proof of E, even though the system would know that a solution for 
E* exists, it might have no way to actually find such a solution. On the other hand, uniform-constructive 
soundness guarantees that a (uniform) solution for every provable formula not only exists, but can be 
effectively extracted from a proof. 

As for completeness of the built-in logic, unlike uniform-constructive soundness, it is a desirable but not 
necessary condition. So far a complete axiomatization has been found only for the fragment of CL limited to 
the language of CL4. We hope that the future will bring completeness results for more expressive fragments 
as well. But even if not, we can still certainly succeed in finding ever stronger axiomatizations that are 
uniform-constructively sound even if not necessarily complete. Extending CL4 with some straightforward 
rules such as the ones that allow to replace oF by FAoF and kF by FAkF, the rules F i-» ii* 1 , F AF, etc. 
would already immensely strengthen the logic. Our soundness proof for the incomplete affine logic given later 
is another result in a similar direction. It should be remembered that, when it comes to practical applications 
in the proper sense, the logic that will be used is likely to be far from complete anyway. For example, the 
popular classical-logic-based systems and programming languages are incomplete, and the reason is not that 
a complete axiomatization for classical logic is not known, but rather the unfortunate fact of life that often 
efficiency only comes at the expense of completeness. 

But even CL4, despite the absence of recurrence operators in it, is already very powerful. Why don't we 
see a simple example to get the taste of it as a query-solving logic. Let Acid(x) mean "solution x contains 
acid" , and Red(x) mean "litmus paper turns red in solution x" . Assume that the knowledgebase KB of a 
CL4-based system contains \/x(Red{x) <-> Acid(x)) and \~\x(Red(x) U ^Red(x)) , accounting for knowledge 
of the fact that a solution contains acid iff the litmus paper turns red in it, and for availability of a provider 
who possesses a piece of litmus paper that it can dip into any solution and report the paper's color to the 
system. Then the system can solve the acidity query \~~\x(Acid(x) U ^Acid(x)) . This follows from the fact, 
left as an exercise for the reader to verify, that CL4 h KB — > \~\x(Acid(x) U -^Acid(x)) . 

Section 26 of [12] outlines how the context of knowledgebase systems can be further extended to systems 
for planning and action. Roughly, the formal semantics in such applications remains the same, and what 
changes is only the underlying philosophical assumption that the truth values of predicates and propositions 
are fixed or predetermined. Rather, those values in CL-based planning systems are viewed as something 
that interacting agents may be able to manage. That is, predicates or propositions there stand for tasks 
rather than facts. E.g. Pregnant(Dana) — or, perhaps, Impregnate(Dana) instead — can be seen as having 
no predetermined truth value, with Dana or her mate being in control of whether to make it true or not. 
And the nonelementary formula \~\xHit(x) describes the task of hitting any one target x selected by the 
environment/commander/user. Note how naturally resource-consciousness arises here: while \~\xHit(x) is a 
task accomplishable with one ballistic missile, the stronger task \~~\xHit(x) A Y~\xHit{x) would require two 
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missiles instead. All of the other operators of CL, too, have natural interpretations as operations on physical 
(as opposed to just informational) tasks, with — > acting as a task reduction operation. To get a feel of this, 
let us look at the task 

Give me a wooden stake l~l Give me a silver bullet 
— ► Destroy the vampire l~l Kill the werewolf. 

This is a task accomplishable by an agent who has a mallet and a gun as well as sufficient time, energy and 
bravery to chase and eliminate any one (but not both) of the two monsters, and only needs a wooden stake 
and/or a silver bullet to complete his noble mission. Then the story told by the legal run (_L2.2,T1.2) of 
the above game is that the environment asked the agent to kill the werewolf, to which the agent replied by 
the counterrequest to give him a silver bullet. The task will be considered eventually accomplished by the 
agent iff he indeed killed the werewolf as long as a silver bullet was indeed given to him. 

The fact that CL is a conservative extension of classical logic also makes the former a reasonable and 
appealing alternative to the latter in its most traditional and unchallenged application areas. In particular, it 
makes perfect sense to base applied theories — such as, say, Peano arithmetic (axiomatic number theory) — 
on CL instead of classical logic. Due to conservativity, no old information would be lost or weakened this way. 
On the other hand, we would get by an order of magnitude more expressive, constructive and computationally 
meaningful theories than their classical-logic-based versions. Let us see a little more precisely what we mean 
by a CL-based applied theory. For simplicity, here we restrict our considerations to the cases when the 
set AX of nonlogical axioms of the applied theory is finite. As we did with KB, we identify AX with the 
A-conjunction of its elements. From (the problem represented by) AX — or, equivalently, each conjunct of 
it — we require to be computable in our sense, i.e. come with an HPM or EPM that solves it. So, notice, all 
axioms of the old, classical-logic-based version of the theory could be automatically included into the new set 
AX because they represent true and hence computable elementary problems. Many of those old axioms can 
be constructivized by, say, replacing blind or parallel operators with their choice equivalents. E.g., we would 
want to rewrite the axiom Vx3y(y = x + 1) of arithmetic as the more informative PIxU^?/ = x + 1). And, 
of course, to the old axioms or their constructivized versions could be added some essentially new axioms 
expressing basic computability principles specific to (the particular interpretation underlying) the theory. 
Provability (theoremhood) of a formula F in such a theory we understand as provability of the formula 
AX-^f F in the underlying axiomatization of CL which, as in the case of knowledgebase systems, is assumed 
to be uniform-constructively sound. The rule of modus ponens has been shown in [12] (Proposition 21. 3) 12 
to preserve computability in the following constructive sense: 

Theorem 10.1 There is an effective junction h: {EPMs} X {EPMs} — ► {EPMs} such that, for any EPMs 
£,C, static games A,B and valuation e, if £ \= e A and C \= e A — > B, then h(£,C) \= e B. 

This theorem, together with our assumptions that ^4Xis computable and that the underlying logic is uniform- 
constructively sound, immediately implies that the problem represented by any theorem F of the applied 
theory is computable and that, furthermore, a solution for such a problem can be effectively constructed from 
a proof of F. So, for example, once a formula rixLJj/p(x, y) has been proven, we would know that, for every x, 
a y with p(x, y) not only exists, but can be algorithmically found; furthermore, we would be able to actually 
construct such an algorithm. Similarly, a reduction — in the sense of Definition 6.1(4) — of the acceptance 
problem to the halting problem would automatically come with a proof of Y~\xY~\y(H(x, y) U -^H{x,y)) —* 
V~\xV~\y{A(x, y) U -*A(x,y)) in such a theory. Is not this exactly what the constructivists have been calling 
for?.. 

11 Affine logic 

Linear logic and its variations such as affine logic have only one group !, ? of exponential operators. The 
semantics of CL induces at least two equally natural "counterparts" of !, ?: the parallel group A, Y and the 

12 In the official formulation of Proposition 21.3 in [12], the first argument of h was an HPM. In view of Theorem 6.3, however, 
replacing "HPM" with "EPM" is perfectly legitimate. 
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branching group o,? of recurrence operators. Hence, when rewritten in terms of computability logic, each 
(!, ?)-involving rule of linear logic produces two identical versions: one with (A, Y) and one with (o, ?). 

Precisely, the language of what we here call affine logic AL is obtained from the more expressive 
language of Section 7 by forbidding nonlogical elementary atoms (but not the logical elementary atoms T 
and _L), and restricting the operators of the language to A, V, U, A, Y, o, ?, I"!, U. For simplicity, this 
list does not officially include — > or other definable operators such as >- and o— . If we write F — > G, it 
should be understood as an abbreviation of ->FVG. Furthermore, without loss of expressive power, we allow 
-i to be applied only to nonlogical atoms, in all other cases understanding -F as an abbreviation defined by: 
-T = ±; -,J_ = t"; -i-F = F; ->(Fi A ... A F n ) = -\F\ V ... V -iF n ; ->(Fi V ... V F n ) = -<Fi A ... A -iF n ; 
-.(Fi n . . . n F n ) = -.Fi U . . . U ^F„; -.(Fi U . . . U F n ) = -.Fi n . . . n -F„; -.AF = Y"F; ^YF = A-.F; 
->oF = ?-.F; -.?F = i-F; -HxF = Ux^F; -UxF = Hx^F. The formulas of this language will be 
referred to as AL- formulas. 

Let x be a variable, t a term and F(x) a formula. We say that t is free for x in F(x) iff none of the 
free occurrences of x in F(x) is in the scope of Qt for some quantifier Q. Of course, when t is a constant, 
this condition is always satisfied. 

A sequent is a nonempty finite sequence of AL- formulas. We think of each sequent F\, . . . ,F n as the 
formula Fl V . . . V F n . This allows us to automatically extend the concepts of validity, uniform validity, free 
occurrence, etc. from formulas to sequents. A formula F is considered provable in AL iff F, understood 
as a one-element sequent, is provable. 

Deductively logic AL is given by the following 16 rules, where: G,H_ are arbitrary (possibly empty) 
sequences of AL-formulas; YG is an arbitrary (possibly empty) sequence of Y-prefixcd AL-formulas; ?G is 
an arbitrary (possibly empty) sequence of ?-prcfixcd AL-formulas; n > 2; 1 < i < n; x is any variable; E, 
F, Fi, . . . , E n , E{x) are any AL-formulas; y is any variable not occurring (whether free or within \~~\y or 
Uy) in the conclusion of the rule; and t is any term free for x in E(x). 

Identity Axiom: 

— <E, E 

T-Axiom: 

T 

G,E,F,H 
Exchange: 

G,F,E,H 



G 

Weakening: 

G,E 



G, YF, YF 

Y-Contraction: 

G, YF 

G,?F,?F 
?-Contraction: 

G,?F 

G, Ei 

U-Introduction: 

G, Fi U . . . U F, 
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n-Introduction: 



V-Introduction: 



A-Introduction: 



Y-Introduction: 



G , E\ . . . G, £^7) 
G,E 1 n...nE n 

G,Ei,...,E n 



G,E 1 V...VE n 

Gi , Ei ... G n , E n 

Gj_, . . . , Gn, E\ A ... A E n 

G,E 
G,lE 



? -Introduction: 



A-Introduction: 



o-Introduction: 



U-Introduction: 



fl-Introduction: 



G, E 
G,?E 

m,E 

YG, kE 

m,E 

?G,kE 

G, E(t) 
G, UxE{x) 

G,E(y) 
G, UxE{x) 



Unlike any other results that we have surveyed so far, the soundness and completeness of affine logic, 
while claimed already in [12], has never been officially proven. For this reason, the following theorem comes 
with a full proof, to which most of the remaining part of this paper is devoted. 

Theorem 11.1 // AL h S, then VrS (any sequent S). Furthermore: 

Uniform-Constructive Soundness: There is an effective procedure that takes any AL-proof of any 

sequent S and constructs a uniform solution for S. 

As mentioned earlier, a similar (uniform-constructive) soundness theorem for Heyting's intuitionistic 
calculus has been proven in [19], with intuitionistic implication understood as o— , and intuitionistic con- 
junction, disjunction and quantifiers as n, U, V~\, U. 

12 Soundness proof for affine logic 

This technical section is devoted to a proof of Theorem 11.1. It also contains a number of useful lemmas 
that could be employed in other proofs. 
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12.1 CL4-derived validity lemmas 

In our proof of Theorem 11.1 we will need a number of lemmas concerning uniform validity of certain 
formulas. Some of such validity proofs will be given directly in Sections 12.3 and 12.4. But some proofs 
come "for free", based on the already known soundness of CL4. In fact, here we will only exploit the 
propositional fragment CL2 of CL4. The former is obtained from the latter by mechanically restricting its 
language to 0-ary letters, and disallowing the (now meaningless) usage of quantifiers. Let us call the formulas 
of such a language CL2-formulas. Restricting the language to CL2-formulas simplifies the formulation of 
CL4: Rule B2 disappears, and so does clause (ii) of Rule A. CL4 is a conservative extension of CL2, so, 
for a CL2-formula F, it does not matter whether we say CL4 h F or CL2 h F. 

In Section 11 we started using the notation G for sequences of formulas. We also agreed to identify 
sequences of formulas with V-disjunctions of those formulas. So, from now on, an underlined expression such 
as G will mean an arbitrary formula G\ V . . . V G n for some n > 0. The expression GVE should be read as 
Gi V . . . V G n V E rather than as {G\ V . . . V G n ) V E. The number of disjuncts in G may be empty. When 
this is a possibility, G will usually occur as a disjunct within a bigger expression such asGV£orG^£, 
both of which simply mean E. 

As we agreed that p, q, r, s (with no tuples of terms attached) stand for nonlogical elementary atoms and 
P, Q, R, S for general atoms, p, q,r,s will correspondingly stand for V-disjunctions of elementary atoms, and 
P, Q,R,S_ for V-disjunctions of general atoms. 

We will also be underlining complex expressions such as G — > H, UxG(x) or ?G. G — » H should be 
understood as (Gi — > Hi) V ... V (G n — ► H n ), UxG(x) as UxGi(x) V ... V UxG n (x) (note that only the 
d vary but not x), ?G as ?Gi V . . . V ?G„, ??G as ?(?Gi V ... V ?G„), etc. 

A CL2-formula E is said to be general-base iff it does not contain any elementary atoms. A substi- 
tution is a function a that sends every general atom P of the language of CL2 to a (not necessarily CL2-) 
formula <j(P). This mapping extends to all general-base CL2-formulas by stipulating that a commutes with 
each operator: a(->E) = ->a(E), a{E\ 11 ... n E k ) = a(Ei) n . . . n a(E k ), etc. We say that a formula F is 
a substitutional instance of a general-base CL2-formula E iff F = a(E) for some substitution a. Thus, 
"F is a substitutional instance of E" means that F has the same form as E. 

In the following lemma, we assume n > 2, and 1 < i < n. Note that the expressions given in clauses 
(d)-(k) are schemata of formulas rather than formulas, for the lengths of their underlined expressions, as well 
as i and n, may vary. Strictly speaking, the expressions of clauses (a)-(c) are so as well, because P, Q, R are 
metavariables for general atoms rather than particular general atoms. 

Lemma 12.1 All substitutional instances of all CL2- formulas given by the following schemata are uniformly 
valid. Furthermore, there is an effective procedure that takes any particular formula matching a given scheme 
and constructs an EPM that is a uniform solution for all substitutional instances of that formula. 

a) nPvP; 

b) PVQ^QV P; 

c) (P^Q)/\(Q^R)^(P^ R); 

d) (Qi V Pi) A . . . A (Qn V P n ) -> Qi V . . . V Qn V (Pi A . . . A P n ); 

e) (P -> Q) -» (R V P V S -» R V Q V S); 

f) QV RV QV (R)V S; 

g) QV(R)VS^QVRVS; 

h) (Pi A P 2 A . . . A P n -f Q) - (Pi -f (P 2 -f . . . (P n - Q) . . .)); 
iJQ^QVP; 

j) P -» P U . . . U P„; 

k) (gvPi) A...A(QVP„) ->QV(Pin...nP n ). 

Proof. In order to prove this lemma, it would be sufficient to show that all formulas given by the above 
schemata are provable in CL4 (in fact, CL2). Indeed, if we succeed in doing so, then an effective procedure 
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whose existence is claimed in the present lemma could be designed to work as follows. First, the procedure 
finds a CL4-proof of a given formula E. Then, based on that proof and using the procedure whose existence 
is stated in Theorem 9.4, it finds a uniform solution £ for that formula. It is not hard to see that the same 
£ will automatically be a uniform solution for every substitutional instance of E as well. So, now it remains 
to do the simple syntactic exercise of checking CL4-provabilitics for each clause of the lemma. 

Notice that every formula E given by one of the clauses (a)-(h) has — more precisely, we may assume that 
it has — exactly two, one negative and one positive, occurrences of each (general) atom, with all occurrences 
being surface ones. For such an E, let E' be the result of rewriting each general atom P of E into a nonlogical 
elementary atom p in such a way that different general atoms are rewritten as different elementary atoms. 
Then E follows from E' in CL4 by a series of applications of Rule C, specifically, as many applications as 
the number of different atoms of E. In turn, observe that for each of the clauses (a)-(h), the formula E' 
would be a classical tautology. Hence E' follows from the empty set of premises by Rule A. Thus, CL4 h E. 

For clause (i), let q be the result of replacing in Q all atoms by pairwise distinct nonlogical elementary 
atoms. The formula q — > q V P is stable and choice-operator-free, so it follows from {} by Rule A. From the 
latter, applying Rule C as many times as the number of disjuncts in Q, we obtain the desired Q — > Q V P. 

For clause (j), the following is a CL4-proof of the corresponding formula(s): 

1. Pi -> Pi (from {} by Rule A); 

2. P -> Pi (from 1 by Rule C); 

3. P -> Pi U . . . U P n (from 2 by Rule Bl). 

For clause (k), note that (Q V Pi) A ... A (Q VP n ) ->■ Q V (Pi n . . . n P„) is stable. Hence it follows by Rule 
A from n premises, where each premise is (Q V Pi) A . . . A (Q V P„) — > Q V Pi for one of the i E {1, . . . , n}. 
Each such formula, in turn, can be obtained by a series of applications of Rule C from 

(Q V Pi) A ... A (Q V P_i) A (q V Pi ) A (Q V P i+1 ) A . . . A (Q V P„) -» q V Pi , 

where Pi is an elementary nonlogical atom and q is obtained from Q by replacing its general atoms by 
pairwise distinct (and distinct from pi) elementary nonlogical atoms. In turn, the above formula can be seen 
to be stable and hence, as it does not contain choice operators, derivable from the empty set of premises by 
Rule A. □ 

12.2 Closure lemmas 

In this section we let n range over positive integers, x over any variables, E, F, G (possibly with subscripts) 
over any AL-formulas, and £, C, T> (possibly with subscripts) over any EPMs. Unless otherwise specified, 
in each context these metavariables are assumed to be universally quantified. 

First two of the following three lemmas have been proven in Section 21 of [12]. Here we provide a proof 
only for the third, never officially proven, one. 

Lemma 12.2 For any static game A, if \= A, then \= bA. 

Moreover, there is an effective function h : {EPMs} ► {EPMs} such that, for any EPM £, static game 

A and valuation e, if £ \= e A, then h{£) \= e bA. 

Lemma 12.3 For any static game A, if \= A, then \= \~~\xA. 

Moreover, there is an effective function h : {EPMs} — ► {EPMs} such that, for any EPM £ and static 
game A, if £ \= A, then h(£) \= \~~\xA. 

Lemma 12.4 For any static game A, if \= A, then \= KA. 

Moreover, there is an effective function h : {EPMs} — ► {EPMs} such that, for any EPM £, static game 
A and valuation e, if £ \= e A, then h{£) \= e kA. 

Proof. Intuitively the idea here is simple: if we (machine £) know how to win A, then, applying the same 
strategy to each conjunct separately, we (machine h{£ )) can win the infinite conjunction kA = A A AAA A. . . 
as well. 

To give a detailed description of the machine h(£) that materializes this idea, we need some preliminaries. 
Remember the e-successor relation between HPM configurations from Section 6. In the context of a fixed 
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HPM TL, valuation e and configuration C , the transition from C to a successor (e-successor) configuration 
C is nondeterministic because it depends on the sequence \E< of the moves (labeled with _L) made by the 
environment while the machine was in configuration C. Once such a * is known, however, the value of C 
becomes determined and can be calculated from C , (the relevant finite part of) e and (the transition function 
of) TL. We call the e-successor of C uniquely determined by such the (e, ^-successor of C (in TL). 

On the way of constructing the EPM h{£), we first turn £ into an HPM TL such that, for every static game 
A and valuation e, TL \= e A whenever £ \= e A. According to Theorem 6.3, such an TL can be constructed 
effectively. Now, using TL, we define h(£) to be the EPM which, with a valuation e spelled on its valuation 
tape, acts as follows. Its work consists in iterating the following procedure ITERATION(fc) infinitely many 
times, starting from k = 1 and incrementing k by one at every new step. During each ITERATION^) 
step, h(£) maintains k — 1 records Ci, . . . , Cu~i and creates one new record Ck, with each such C, holding 
a certain configuration of TL. Here is how ITERATION(fc) proceeds: 

Procedure ITERATION(fc): 

1. Grant permission. Let $ = (-La) if the adversary responds by a move a, and $ = (} if there is no 
response. 

2. For i = l to i = k — 1, do the following: 

a) If TL makes a move (3 in configuration C, make the move i.(3; 

b) Update C to the (e, 5 ,J )-successor 13 of Cj. 

3. Let C be the initial configuration of TL, and <J> the position currently spelled on the run tape. 

a) If TL makes a move [3 in configuration C, make the move k.(3; 

b) Create the record C& and initialize it to the (e, $ fe )-successor of C. 

Obviously (the description of) h(£) can be effectively obtained from TL and hence from £, so that, as 
promised, h is indeed an effective function. What remains to verify is that, whenever £ wins a static game 
A on a valuation e, we have h{£) \= e kA. Consider any such A and e, and suppose h{£) ^= e kA. We want to 
show that then £ ^= e A. Let B be an arbitrary e-computation branch of h{£), and let T be the run spelled 
by B. Permission is granted at the beginning of each of the infinitely many routines ITERATION^), so B 
is fair. Therefore, h(£) ^ e A simply means that ~Wn^ A (T) = _L. The latter, in turn, implies that for some 
n G {1,2,3, . . .}, Wn^(r™j = _L. This can be easily seen from the fact that every move that h{£) makes 
starts with an 'n.' for some n. But an analysis of the procedure followed by h(£) can convince us that T n - is 
the run spelled by some e-computation branch of TL. This means that TL y= e A. Remembering that TL \= e A 
whenever £ |= e A, we find that £ ^= e A. □ 

Lemma 12.5 IflrE, then^kE. 

Moreover, there is an effective function h : {EPMs} — > {EPMs} such that, for any £ and E, if £WrE, 
then h{£)\hkE. 

Proof. As Lemma 12.4 asserts (or rather implies), there is an effective function h : {EPMs} — > 
{EPMs} such that, for any EPM £ and any static game A, if £ \= A, then h(£ ) |= kA. We now claim 
for that very function h that, if £ %-E, then h{£ )WrkE. Indeed, assume £ i~E. Consider any A E- admissible 
interpretation *. Of course, the same interpretation is also inadmissible. Hence, £VlrE implies £ \= E*. But 
then, by the known behavior of h, we have h{£) \= kE* . Since * was arbitrary, we conclude that h(£ )VhkE. 
□ 

Lemma 12.6 IfHrE, then l~hE. 

Moreover, there is an effective function h : {EPMs} — > {EPMs} such that, for any £ and E, if £1rE, 
then h(£)VhkE. 

Proof. Similar to Lemma 12.5, only use Lemma 12.2 instead of Lemma 12.4. □ 



For VE" 1 ', remember the notation F a from page 17. 
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Lemma 12.7 IflrE, then HrHxE. 

Moreover, there is an effective function h : {EPMs} — ► {EPMs} such that, for any £, x and E, if 
£§-E, then h(£)Vh\lxE. 

Proof. Similar to Lemma 12.5, only use Lemma 12.3 instead of Lemma 12.4. □ 

Lemma 12.8 (Modus ponens) //IFF and VhF -> E, then VhE. 

Moreover, there is an effective function h : {EPMs} x {EPMs} — ► {EPMs} such that, for any £, C, F 
and E, if St-F and CUrF -> E, then h(£, C)1rE. 

Proof. According to Theorem 10.1, there is an effective function h: {EPMs} x {EPMs} — > {EPMs} 
such that, for any static games A,B, valuation e and EPMs £ and C, 

if £ \= e A and C\= e A->B, then h(£, C) \= e B. (7) 

We claim that such a function h also behaves as our lemma states. To see this, assume £frF and Ct-F — > E, 
and consider an arbitrary valuation e and an arbitrary inadmissible interpretation *. Our goals is to show 
that h(£,C) he E*, which obviously means the same as 

h(£,C)\= e e[E*}. (8) 

We define the new interpretation t by stipulating that, for every fc-ary letter L with L* = L*(x\, . . . ,Xk), 
is the game L^{x\, . . . , Xk) such that, for any tuple Ci, . . . , Ck of constants, 

L f (ci, . .. ,c fc ) = e[L*(a, . . . ,c fe )]. 

Unlike L*(x\, . . . ,Xk) that may depend on some "hidden" variables (those that are not among x\, . . . , Xk), 
obviously L\x\, . . . , Xk) does not depend on any variables other that x\, . . . , Xk- This makes t admissible 
for any AL-formula, including F and F — > E. Then our assumptions £frF and CUrF — > E imply £ \= e F' 
and C K -> Ft. Consequently, by (7), h(£,C) he E\ i.e. h(£,C) he e[tf]. Now, with some thought, 
we can see that e[E^\ = e[E*]. Hence (8) is true. □ 

Lemma 12.9 (Generalized modus ponens) IffrFi, .... 1hF n and HrFi A . . . A F n — > E, then frE. 

Moreover, there is an effective function h : {EPMs} n+1 — ► {EPMs} such that, for any £\,. . . ,£ n ,C,F\,. . . ,F, 
if £\&~F\, . . . , £ n t-F n and CVhFi A...AF„-»£, then h(£\, . . . , £ n ,C)i~E. Such a function, in turn, can be 
effectively constructed for each particular n. 

Proof. In case n = 1, h is the function whose existence is stated in Lemma 12.8. Below we will 
construct h for the case n = 2. It should be clear how to generalize that construction to any greater n. 

Assume £i»kFi, £ 2 HrF 2 and CMf-Fi A F 2 -> E. By Lemma 12.1(h), the formula (Ft A F 2 -> E) -» (F 1 -> 
(F 2 — > E)) has a uniform solution. Lemma 12.8 allows us to combine that solution with C and find a uniform 
solution T>\ for F\ — » (F 2 — > F). Now applying Lemma 12.8 to <?i and Di, we find a uniform solution T> 2 for 
F 2 — > F. Finally, applying the same lemma to £2 and 2?2, we find a uniform solution X> for F. Note that I? 
does not depend on F\,F 2 , F, and that we constructed T> in an effective way from the arbitrary £\, £ 2 and 
C. Formalizing this construction yields the function h whose existence is claimed by our present lemma. □ 

Lemma 12.10 (Transitivity) If t~F — > F and t~E -> G, t/ien H-F -> G. 

Moreover, there is an effective function h : {EPMs} x {FPMs} — > {FFMs} smc/i t/iat, /or any £\, £ 2 , 
F, E and G, ifS^F -» F and £ 2 FF ^ G, t/ien /i(^i, £ 2 )VhF G. 

Proof. Assume fiH-F -» F and £ 2 IFF G. By Lemma 12.1(c), we also have CIF(F F) A (F -> 
G) — > (F — > G) for some C. Lemma 12.9 allows us to combine the three uniform solutions and construct 
a uniform solution T> for F — > G. Formalizing this construction yields the function ft, whose existence is 
claimed by our lemma. □ 
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12.3 More validity lemmas 

In this section we will prove a number of winnability facts by describing winning strategies in terms of EPMs. 
When trying to show that a given EPM wins a given game, it is always safe to assume that the runs that the 
machine generates are never _L-illegal, i.e. that the environment never makes a (first) illegal move, for if it 
does, the machine automatically wins. This assumption, that we call the clean environment assumption, 
will always be explicitly or implicitly present in our winnability proofs. 

We will often employ a uniform solution for P — > P called the copy-cat strategy (CCS). This strategy, 
sketched for ->C'hess V Chess in Section 4.3, consists in mimicking, in the antecedent, the moves made by 
the environment in the consequent, and vice versa. More formally, the algorithm that CCS follows is an 
infinite loop, on every iteration of which CCS keeps granting permission until the environment makes a 
move La (resp. 2. a), to which the machine responds by the move 2. a (resp. La). As shown in the proof of 
Proposition 22.1 of [12], this strategy guarantees success in every game of the form AV-*A and hence A — > A. 
A perhaps important detail is that CCS never looks at the past history of the game, i.e. the movement of 
its scanning head on the run tape is exclusively left-to-right. This guarantees that, even if the original game 
was something else and it only evolved to A — > A later as a result of making a series of moves, switching to 
CCS after the game has been brought down to A — > A ensures success no matter what happened in the past. 

Throughout this section, E and F (possibly with indices and attached tuples of variables) range over 
AL-formulas, x and y over variables, t over terms, n,k,i,j over nonnegative integers, w over bitstrings, 
and a, 7 over moves. These metavariables are assumed to be universally quantified in each context unless 
otherwise specified. In accordance with our earlier convention, e stands for the empty bitstring. 

Next, * always means an arbitrary but fixed interpretation admissible for the formula whose uniform 
validity we are trying to prove. For readability, we will sometimes omit this parameter and write, say, E 
instead of E* . From the context it will be usually clear whether " E" stands for the formula E or the game 
E* . Similarly, in our winnability proofs e will always stand for an arbitrary but fixed valuation — specifically, 
the valuation spelled on the valuation tape of the machine under question. Again, for readability, we will 
typically omit e when it is irrelevant, and write E* (or just E) instead of e[i5*]. 

Lemma 12.11 t~E -> YE. 

Moreover, there is an EPM £ such that, for any E, £§-E — ► YE. 

Proof. The idea of a uniform solution £ for E — > YE is simple: seeing the consequent as the infinite 

disjunction EV EV EV , ignore all of its disjuncts but the first one, and play E — > YE as if it was just 

E -> E. 

In more precise terms, £ follows the following procedure LOOP which, notice, only differs from CCS in 
that the move prefix '2.' is replaced by '2.1.': 

Procedure LOOP: Keep granting permission until the environment makes a move 'La' or '2. La'; in 
the former case respond by the move '2. La', and in the latter case respond by the move 'La'; then repeat 
LOOP. 

Consider an arbitrary e-computation branch B of £, and let O be the run spelled by B. Obviously 
permission is granted infinitely many times in J5, so B is fair. Hence, in order to show that £ wins E* — > YE* 
(on the irrelevant valuation e which we, according to our conventions, are omitting and pretend that E* is 
a constant game so that e[E*] = E), it would suffice to show that Wn E ^ E (O) = T. 

Let ©i denote the initial segment of 6 consisting of the (lab)moves made by the players by the beginning 
of the ith iteration of LOOP in B (if such an iteration exists). By induction on i, based on the clean 
environment assumption and applying a routine analysis of the behavior of LOOP, one can easily find that 

If LOOP is iterated infinitely many times, then the above obviously extends from ©^ to 0, because every 
initial segment of © is an initial segment of some 0j, and similarly for 1 - and 21 \ Suppose now LOOP is 
iterated only a finite number m of times. Then = (0 m ,r), where T entirely consists of _L-labeled moves 
none of which has the prefix 'L' or '2.1'. This is so because the environment cannot make a move La or 2. La 
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during the mth iteration (otherwise there would be a next iteration) and, since £'s moves are only triggered 
by the above two sorts of moves, £ does not move during the mth iteration of LOOP. But then, in view of 
the clean environment assumption, O inherits condition (a) of (9) from O m , because there are no T-labeled 
moves in L; and the same is the case with condition (b), because (GmjT) 1, = and (O m ,r) 21 - = O^ 1 '. 
Thus, no matter whether LOOP is iterated a finite or infinite number of times, we have: 

a) 6eLr B%yF ; 

b) -.e 1 - = e 2 - 1 -. 

Since © e Lr E "^ YE ' , in order to show that Wn F " yr (9) = T, i.e. show that Wn nFvW *(9) = T, 
by the definition of V, it would suffice to verify that either Wn" E (O 1 ) = T or Wn YB (O 2 ) = T. So, 
assume Wn nB '(9 L ) ^ T, i.e. Wn nE '{9 L ) = _L, i.e. Wn p (n9 L ) = T. Then, by clause (b) of (10), 
Wn F (6 2 ' 1 -) = T. But then, by the definition of Y, Wn YB * (O 2 -) = T. 

Thus, £ |= E* — > 1 E* . Since * was arbitrary and the work of £ did not depend on it, we conclude that 
£VhE^YE. □ 

Lemma 12.12 VhE -> ?E. 

Moreover, there is an EPM £ such that, for any E, £frE — > fE. 

Proof. Again, the idea of a uniform solution £ for E — > ?E is simple: just act as CCS, never making 
any rcplicative moves in the consequent and pretending that the latter is E rather than (the easier-to-win) 
^E. The following formal description of the interactive algorithm that £ follows is virtually the same as that 
of CCS, with the only difference that the move prefix '2.' is replaced by '2.e.'. 

Procedure LOOP: Keep granting permission until the environment makes a move 'l.a' or '2.e.a'; in 
the former case respond by the move '2.e.a', and in the latter case respond by the move 'l.a'; then repeat 
LOOP. 

Consider an arbitrary e-computation branch B of £. Let O be the run spelled by B. As in the proof 
of the previous lemma, clearly permission will be granted infinitely many times in B, so this branch is fair. 
Hence, in order to show that £ wins the game, it would suffice to show that Wn B ^ E (O) = T. 

Let 0j denote the initial segment of O consisting of the (lab)moves made by the players by the beginning 
of the ith iteration of LOOP in B. By induction on i, based on the clean environment assumption and 
applying a routine analysis of the behavior of LOOP and the definitions of the relevant game operations, 
one can easily find that 

a) 4 GLr Mfr ; 

b) -nGj- = 6 2 - ; 

c) All of the moves in ©?• have the prefix 'e. '. 

If LOOP is iterated infinitely many times, then the above obviously extends from @j to 6, because every 
initial segment of O is an initial segment of some 6j, and similarly for O 1 - and @ 2c - . And if LOOP is iterated 
only a finite number m of times, then © = TO . This is so because the environment cannot make a move 
l.a or 2.e. a during the mth iteration (otherwise there would be a next iteration), and any other move would 
violate the clean environment assumption; and, as long as the environment does not move during a given 
iteration, neither does the machine. Thus, no matter whether LOOP is iterated a finite or infinite number 
of times, we have: 

a) O e Lr E '^ 9E '; 

b) -.0 1 - = 6 2 e - ; 

c) All of the moves in © 2 - have the prefix 'e. ' 

Since O e Lr B ^ ?E , in order to show that Wn £ ^ E (9) = T, it would suffice to verify that either 
Wn nE '(9 L ) = T or Wn ?r (9 2 ) = T. So, assume Wn^*(9 L ) ^ T, i.e. Wn nE '(9 L ) = _L, i.e. 
Wn E *(n9 L ) = T. Then, by clause (b) of (11), Wn F (9 2e ) = T. Pick any complete branch w of 
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Tree^ E (O 2 '}. In view of clause (c) of (11), we obviously have 9 2 e ' = (0 2 )- 1 " (in fact, w = e). Hence 
Wn^^e 2 ')^) = T. Then, by the definition of ?, Wn ?B *(9 2 -) = T. 

Thus, £ \= E* — > and, as * was arbitrary and the work of £ did not depend on it, we conclude that 
£VhE^?E. □ 

Having already seen two examples, in the remaining uniform validity proofs we will typically limit our- 
selves to just constructing interactive algorithms, leaving routine verification of their correctness to the 
reader. An exception will be the proof of Lemma 12.20 given separately in Section 12.4 where, due to the 
special complexity of the case, correctness verification will be done even more rigorously than we did this in 
the proofs of Lemmas 12.11 and 12.12. 

Lemma 12.13 fhk(E — > F) — > (kE -> kF). 

Moreover, there is an EPM £ such that, for every E and F, 

£Vhk(E — > F) -► (kE^ kF). 

Proof. Here is a strategy for £ to follow: 

Procedure LOOP: Keep granting permission until the adversary makes a move 7. Then: 

If 7 = l.z.l.a (resp. 7 = 2.1. i. a), then make the move 2.1. i. a (resp. l.i.l.a), and repeat LOOP; 

If 7 = l.ifl.ct (resp. 7 = 2.2.i.a), then make the move 2.2i.a (resp. l.i.2.a), and repeat LOOP. □ 

Lemma 12.14 t~k(E -> F) -> (kE -> kF). 

Moreover, there is an EPM £ such that, for every E and F, 

£frk(E -► F) -► (kE^kF). 

Proof. A relaxed description of a uniform solution £ for k(E — > F) — > (kE — ► kF) is as follows. 
In k(E* — > F*) and kE* the machine is making exactly the same replicative moves (moves of the form 
w:) as the environment is making in kF*. This ensures that the underlying BT-structures of the three 
o-components of the game stay identical, and now all the machine needs for a success is to win the game 
(E* — > F*) — > (E* — > F*) within each branch of those trees. This can be easily achieved by applying 
copy-cat methods to the two occurrences of E and the two occurrences of F. 

In precise terms, the strategy that £ follows is described by the following interactive algorithm. 

Procedure LOOP: Keep granting permission until the adversary makes a move 7. Then: 
If 7 = 2.2.W., then make the moves l.w: and 2.I.W., and repeat LOOP; 

If 7 = 2.2.W.OL (resp. 7 = l.w. 2. a), then make the move l.w. 2. a (resp. 2. 2. to. a), and repeat LOOP; 
If 7 = 2. l.w. a (resp. 7 = l.w.l.a), then make the move l.w.l.a (resp. 2. l.w. a), and repeat LOOP. □ 

Lemma 12.15 IFY(£i V . . . V E n ) ->■ Y-Ei V . . . V YE n . 

Moreover, there is an effective procedure that takes any particular value of n and constructs an EPM £ 
such that, for any Ex,..., E n , £§~Y(E 1 V . . . V E n ) -> YE 1 V . . . V YE n . 

Proof. We let £ act as the following strategy prescribes, with i ranging over {1,2,3,...} and j over 
{l,...,n}: 

Procedure LOOP: Keep granting permission until the adversary makes a move l.i.j.a (resp. 2.j.i.a); 
then make the move 2.j.i.a (resp. l.i.j.a), and repeat LOOP. □ 

Lemma 12.16 9r?(E 1 V . . . V E n ) -> fE 1 V . . . V ?E n . 

Moreover, there is an effective procedure that takes any particular value of n and constructs an EPM £ 
such that, for any E 1 ,..., E n , £l»-?(Ei V...V£ n )-»?£iV...V fE n . 
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Proof. Here is the algorithm for £: 

Procedure LOOP: Keep granting permission until the adversary makes a move 7. Then: 
If 7 — l.w:, then make the n moves 2.I.W., . . . , 2.n.w:, and repeat LOOP; 

If 7 = l.w.j.a (resp. 7 = 2.j.w.a) where 1 < j < n, then make the move 2.j.w.a (resp. l.w.j.a), and 
repeat LOOP. □ 

Lemma 12.17 WrYE V YE -» Y£. 

Moreover, t/iere is an £PM £ such that, for any E, £^rY E V YE -> Y£. 

Proof. We let £ work as the following strategy prescribes: 

Procedure LOOP: Keep granting permission until the adversary makes a move 7. Then act depending 
on which of the following cases applies, and after that repeat LOOP: 
If 7 = 1.1. z. a, then make the move 2.j.a where j = 2i — 1; 
If 7 = 1.2. i. a, then make the move 2.j.a where j = 2i; 
If 7 = 2.j.a where j = 2i — 1, then make the move l.l.i.a; 
If 7 = 2.j.a where j = 2i, then make the move \.2.i.a. □ 

Lemma 12.18 V ?£ -> ?£. 

Moreover, t/iere is an £PM £ suc/i i/iai, /or any £fhYE V ?£ -> ?£. 

Proof. The idea of a strategy for £ is to first replicate the consequent turning it into ?(£?* o E*), which 
is essentially the same as ?E* V?i?*, and then switch to a strategy that is essentially the same as the ordinary 
copy-cat strategy. Precisely, here is how £ works: it makes the move 2.e: (replicating the consequent), after 
which it follows the following algorithm: 

Procedure LOOP: Keep granting permission until the adversary makes a move 7. Then: 
If 7 = 2.0a (resp. 7 = 1.1. a), then make the move 1.1. a (resp. 2.0a), and repeat LOOP; 
If 7 = 2.1a (resp. 7 = 1.2. a), then make the move 1.2. a (resp. 2.1a), and repeat LOOP; 
If 7 = 2.e.a, then make the moves l.l.e.a and 1.2.e.a, and repeat LOOP. □ 

Lemma 12.19 KKYYi? YE. 

Moreover, there is an EPM £ such that, for any E, £VhYYE — *■ YE. 

Proof. We select any effective one-to-one function / from the set of all pairs of nonnegative integers 
onto the set of all nonnegative integers. Below is the interactive algorithm that £ follows: 
Procedure LOOP: Keep granting permission until the adversary makes a move 7. Then: 
If 7 = l.i.j.a, then make the move 2.k.a where k = f(i,j), and repeat LOOP; 
If 7 = 2.fc.a, then make the move 2.i.j.a where k = f(i,j), and repeat LOOP. □ 

Lemma 12.20 -> fE. 

Moreover, there is an EPM £ such that, for any E, £fr??E — > fE. 

Proof. Our proof of this lemma, unlike that of the "similar" Lemma 12.19, is fairly long. For this 
reason, it is given separately in Section 12.4. □ 

In what follows, we will be using the expressions E*(x), E*(t), etc. to mean the same as the more clumsy 
(E(x)) , (-E(i)) , etc. Also, remember from Section 3 that, when t is a constant, e(t) = t. 

Lemma 12.21 Wr\lx(E(x) -» F(x)) -» (\lxE(x) -► \lxF(x)) . 
Moreover, there is an EPM £ such that, for any E{x) and F{x), 

£t-r\x(E{x) -» F{x)) -► (\lxE(x) \lxF(x)). 
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Proof. Strategy: Wait till the environment makes the move '2.2.c' for some constant c. This brings the 
V~\xF*(x) component down to F*(c) and hence the entire game to 

\lx(E*(x) F*(x)) -» (\lxE*(x) -» F*(c)). 

Then make the same move c in the antecedent and in \~\xE* (x) , i.e. make the two moves T.c' and '2.1. c'. 
The game will be brought down to (E*(c) -> F*(c)) -> (E*(c) -> F*(c)). Finally, switch to CCS. □ 

Lemma 12.22 Assume t is free for x in E(x). Then WrE(t) -> Ux£(x). 

Moreover, there is an effective function that takes any t and constructs an EPM £ such that, for any 
E(x), whenever t is free for x in E(x), £t-E(t) — > UxE(x). 

Proof. Strategy: Let c = e(t). Read c from the valuation tape if necessary (i.e. if t is a variable). Then 
make the move '2.c', bringing the game down to E*(c) — > E*(c). Then switch to CCS. □ 

Lemma 12.23 Assume E does not contain x. Then VhE — > \~\xE. 

Moreover, there is an EPM £ such that, for any E and x, as long as E does not contain x, £fhE — > \~\xE. 

Proof. In this case we prefer to explicitly write the usually suppressed parameter e. Consider an 
arbitrary E not containing x, and an arbitrary interpretation * admissible for E — > Y~\xE. The formula 
E — > \~~\xE contains x yet E docs not. Therefore, from the definition of admissibility and with a little 
thought we can see that E* does not depend on x. In turn, this means — as can be seen with some 
additional thought — that the move c by the environment (whatever constant c) in efflx-E*] brings this 
game down to e[E*}. With this observation in mind, the following strategy can be seen to be successful: Wait 
till the environment makes the move '2.c' for some constant c. Then read the sequence 'Lai', • ■ • , 'La n ' of 
(legal) moves possibly made by the environment before it made the above move '2.c', and make the n moves 
'2.Q!i', . . . , '2.a„'. It can be seen that now the original game e[E*\ — » e[r~la;-E*] will have been brought down 
to {<&)e[E*\ — ► {<f>)e[E*\, where $ = (Tai, . . . , Ta n ). So, switching to CCS at this point guarantees success. 
□ 

Lemma 12.24 Assume E(x) does not contain y. Then 1r\~\yE(y) — ► \~\xE(x). In fact, CCS1h\~\yE(y) — > 
l~la:£7(a:). 

Proof. Assuming that E(x) does not contain y and analyzing the relevant definitions, it is not hard to see 
that, for any interpretation * admissible for \~\yE(y) — > \~~\xE(x), we simply have (J~\yE(y)) = (J~\xE(x)) . 
So, we deal with a game of the form A — > A, for which the ordinary copy-cat strategy is successful. □ 

12.4 Iteration principle for branching recurrence 

The computability principles expressed by the formulas YY-E — > IE and ??£ — > ?S, that can be equivalently 
rewritten as kE — > AAi? and A-E — > iifi, we call iteration principles (for A and A, respectively). This 
section is entirely devoted to a proof of Lemma 12.20, i.e. the iteration principle for A. We start with some 
auxiliary definitions. 

A colored bit b is a pair (c, d), where c, called the content of b, is in {0, 1}, and d, called the color of 
b, is in {blue, yellow}. We will be using the notation c ("blue c") for the colored bit whose content is c and 
color is blue, and c ( "yellow c" ) for the bit whose content is c and color is yellow. The four colored bits will 
be treated as symbols, from which, just as from ordinary bits, we can form strings. 

A colored bitstring is a finite or infinite string of colored bits. Consider a colored bitstring v. The 
content of v is the result of "ignoring the colors" in v, i.e. replacing every bit of v by the content of that bit. 
The blue content of v is the content of the string that results from deleting in v all but blue bits. Yellow 
content is defined similarly. We use V, v and v to denote the content, blue content and yellow content of 
v, respectively. Example: if v = 10001, we have y_ = 10001, v = 10 and v = 001. As in the case of ordinary 
bitstrings, e stands for the empty colored bitstring, and u < w means that u is a (not necessarily proper) 
initial segment of w. 
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Definition 12.25 A colored bitstring tree (CBT) is a set T of colored bitstrings, called its branches, 

such that the following conditions are satisfied: 

a) The set {v_ | v G T}, which we denote by T, is a BT in the sense of Definition 4.9. 

b) For any w, u G T, if W = u, then w = u. 

c) For no (finite) v G T do we have {vO, vl} C T or {vO, vl]_ C T. 
A colored bitstring v is said to be a leaf of T iff V is a leaf of T. 

When represented in the style of (the underlying tree of) Figure 11 of Section 4.6, a CBT will look like 
an ordinary BT, with the only difference that now every edge will have one of the colors blue or yellow. Also, 
by condition (c) , both of the outgoing edges ( "sibling" edges) of any non-leaf node will have the same color. 

Lemma 12.26 Assume T is a CBT, and w, u are branches of T with w <u and w^u. Then w ^ u. 

Proof. Assume T is a CBT, w,u G T, and w ^ u. We want to show that then w -fs u or w ^ u. Let 
v be the longest common initial segment of w and u, so we have w = vw' and u = vu' for some w' , u' such 
that w' is nonempty and w' and u' do not have a nonempty common initial segment. Assume the first bit 
of w' is (the cases when it is 1, or 1, of course, will be similar). If u' is empty, then w obviously contains 
more blue bits than u does, and we are done. Assume now u' is nonempty, in particular, b is the first bit 
of u' . Since w 1 and u' do not have a nonempty common initial segment, b should be different from 0. By 
condition (b) of Definition 12.25, the content of b cannot be (for otherwise we would have vO = vb and 
hence 6 = 0). Consequently, b is either 1 or L The case b = 1 is ruled out by condition (c) of Definition 
12.25. Thus, 6=1. But the blue content of vO is vO while the blue content of vl is vl. Taking into account 
the obvious fact that the former is an initial segment of wJ and the latter is an initial segment of u, we find 
w 2< u. □ 

The uniform solution £ for ??£? — > ?E that we are going to construct essentially uses a copy-cat strategy 
between the antecedent and the consequent. Of course, however, this strategy cannot be applied directly in 
the form of CCS. The problem is that while a position of is a decorated tree T in the style of Figure 11 
of Section 4.6, in the case of ??£?* it is a tree T' of trees such as, say, the one shown below: 





\1 


{$i)E* 









Figure 13: A position T of ??£* 



The trick that £ uses is that it sees the BT-structure of T as a colored bitstring tree, letting such a T 
"simulate" T . Specifically, £ tries to maintain a one-to-one correspondence between the leaves (windows) of 
T and the leaves of the leaves (small windows) of T', with the positions of E* in each pair of corresponding 
windows being identical. Figure 14 shows a possible T, whose six windows, as we see, have the same contents 
as the six small windows of T', even if some permutation in the order of windows has taken place. 
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Figure 14: A possible corresponding position T of ?E* 



The way this mapping works is that to a leaf y of a leaf x of T' corresponds a (the) leaf of T whose 
yellow content is y and blue content is x, and vice versa. E.g., look at the small window containing ($3}^* 
in Figure 13. It is leaf 00 of leaf 01 of T'; and the window containing the same ($ 3 )i?* in Figure 14 is 
leaf 0010 of T, whose yellow content is indeed 00 and blue content is indeed 01. £ has a way to maintain 
such a correspondence. Let us see how it acts when the antecedent and the consequent of — > IE* 
have evolved to the positions shown in Figures 13 and 14, respectively If, say, the environment makes a 
non-replicative move a in the ($ 3 )i?* component of T' (rcsp. T), £ responds by the same move a in the 
($ 3 }_E* component of T (resp. T'). This ensures that the positions of E* in the two components remain 
identical. Of course, the environment can make a move a in several components at once. For example, the 
move l.OO.e.a by the environment would amount to making move a in the two components {<&i)E* and 
(^2)E* of T . No problem, £ can respond by the two consecutive moves 2. 000. a and 2. 010. a. Now let us 
see how £ handles replicative moves. If the environment replicates a small window of T', £ replicates the 
corresponding window of T, and colors the two newly emerged edges into yellow. In fact, the environment 
can replicate several small windows at once, as, say, would be the case if it makes the move 0.1: in the 
antecedent, amounting to replicating the two windows containing (& 2 )E* and (^>^)E*. But, again, this is 
not a problem, for £ can respond by two (or whatever number of small windows of the antecedent have been 
replicated) consecutive replicative moves in the consequent. Suppose now the environment replicates a large 
window of T' , such as, say, window 00. Then £ responds by replicative moves in all leaves of T whose blue 
content is 00, specifically, leaves 000 and 010, and colors the newly emerged edges into blue. With some 
thought one can see that, with this strategy, it is guaranteed that to any leaf y of any leaf x of the updated 
T again corresponds the leaf of the updated T whose yellow content is y and blue content is x, and vice 
versa. 

In an attempt to understand what replicative moves (ignoring all non-replicative moves inbetween) could 
have resulted in the tree of Figure 13 and the corresponding tree of Figure 14, we find the following. First, 
the environment made the replicative move e: in the antecedent of ??£?* — > ?E*. To this £ responded by 
the replicative move e: in the consequent. Then the environment made the ("deep") replicative move O.e: in 
the antecedent. To this £ responded by 0: in the consequent. Next the environment made the replicative 
move 0: in the antecedent. £ responded by 00: and 01: in the consequent. Finally, the environment made 
(the "deep") replicative move 01.0: in the antecedent, and £ responded by 001: in the consequent. 

Keeping, according to the above scenario, all runs of E* in the branches of branches of the antecedent 
identical with runs of E* in the corresponding branches of the consequent can be eventually seen to guarantee 
a win for £. 

Now we describe £ in precise terms. At the beginning, this EPM creates a record T of the type 'finite 
CBT', and initializes it to {e}. After that, £ follows the following procedure: 

Procedure LOOP: Keep granting permission until the adversary makes a move 7. If 7 satisfies the 
conditions of one of the following four cases, act as the corresponding case prescribes. Otherwise go to an 
infinite loop in a permission state. 

Case (i): 7 = l.w: for some bitstring w. Let v\, . . . ,Vk be 14 all of the leaves v of T with w — v. Then 
make the moves 2.v^:, . . . , 2.v fe :, update T to T U {t>i0, v\l, . . . , VkO, Wfel}, and repeat LOOP. 

14 In each of the four cases we assume that the list v\ , . . . , is arranged lexicographically. 
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Case (ii): 7 = l.w.u: for some bitstrings w, u. Let v\, . . . , Vk be all of the leaves v of T such that w ^ v 
and u = v. Then make the moves 2.v±:, . . . , 2.v_ k :, update T to TU{viO, vil, . . . , v k 0, VkX}, and repeat LOOP. 

Case (in): 7 = l.w.u. a for some bitstrings w,u and move a. Let v\,...,Vk be all of the leaves v of T 
such that w ^ u and w ^ Then make the moves 2.w 1 .a, . . . , 2.v fe .a, and repeat LOOP. 

Case (iv): 7 = 2.w.a for some bitstring w. Let ui, . . . ,Vk be all of the leaves v of T with w ^ w. Then 
make the moves l.vi.^.a, . . . , l.Vk-v k .a, and repeat LOOP. 

Pick an arbitrary interpretation * admissible for ??E — > an arbitrary valuation e and an arbitrary 
e-computation branch B of £ . Let O be the run spelled by B. The work of £ does not depend on e. And, 
as e is going to be fixed, we can safely omit this parameter (as we usually did in the previous section) and 
just write E* instead of e[^*]. Of course, £ is interpretation-blind, so, as long as it wins — > ?E*, it is 
a uniform solution for — ► 

From the description of LOOP it is immediately clear that B is a fair. Hence, in order to show that £ 
wins, it would be sufficient to verify that Wn" E ^ E (O) = T. 

Let N — {!,..., m} if LOOP is iterated the finite number m of times in B, and N = {1,2,3,...} 
otherwise. For i G N, we let Tj denote the value of record T at the beginning of the ith iteration of LOOP. 
Next, @i will mean the initial segment of 6 consisting of the (lab)moves made by the beginning of the ith 
iteration of LOOP. Finally, *j will stand for and <&j for 9f \ 

From the description of LOOP it is obvious that, for each i G N, Ti is a finite colored tree, and that 
T\ C T2 C . . . C Tj. In our subsequent reasoning we will implicitly rely on this fact. 

Lemma 12.27 For every i with i £ N , we have: 

a) 3>i is a prelegal position of '? E* , and Tree ?E = TV 
6^ *i is a prelegal position off?E*. 

c) For every leaf x of Tree" E is a prelegal position of ? E* . 

d) For every leaf z ofTi, z is a leaf of Tree^ E (^i) and z is a leaf of Tree' E (^^ z ). 

e) For every leaf x of Tree" E (\I>j) and every leaf y of Tree^ E {^f-f X ), there is a leaf z of Ti such that 
x = z and y = z. By Lemma 12.26, such a z is unique. 

f) For every leaf z ofT t , §f- = (yfpl. 

g) Qi is a legal position o/??_B* —> ? E* ; hence, $j G Lr 9 ^* and * 4 G Lr 99 ^* . 

Proof. We proceed by induction on i. The basis case with i = 1 is rather straightforward for each 
clause of the lemma and we do not discuss it. For the inductive step, assume i + 1 G N, and the seven 
clauses of the lemma are true for i. 

Clause (a): By the induction hypothesis, <&i is a prelegal position of fE* and TreS E = T i . Assume 
the ith iteration of LOOP deals with Case (i), so that = (<&j, Tw 1 :, . . . , Tu fe :}. 15 Each of V x , . . . , y_ k 

is a leaf of T i; i.e. a leaf of Tree fE (<&j). This guarantees that <&i + i is a prelegal position of ?E*. Also, 
by the definition of function Tree, we have Tree^ E (3>i+i) = Tree 9B ($,) U {u 1 0,u 1 l, . . . ,w fe 0,l fc l}. But the 
latter is nothing but T i+1 as can be seen from the description of how Case (i) updates Ti to T i+i . A similar 
argument applies when the ith iteration of LOOP deals with Case (ii). Assume now the ith iteration of 
LOOP deals with Case (iii). Note that the moves made in the consequent of — > ?£?* (the moves that 
bring to $i+i) are nonreplicative — specifically, look like v_.a where v_ G T; = Tree 9£; * ($;). Such moves 
do not destroy prelegality nor do they change the value of Tree, so Tree' E = Tree' E It remains 

to note that T is not updated in this subcase, so that we also have T i+1 = T f . Hence Tree = 2Zi+i- 

Finally, suppose the ith iteration of LOOP deals with Case (iv). It is the environment who moves in the 
consequent of ??£?* — ► S E* , and does so before the machine makes any moves (in the antecedent). Then 
the clean environment assumption, in conjunction with the induction hypothesis for clause (g), implies that 
such a move by the environment cannot bring $^ to an illegal and hence non-prelegal position of So, 
remains a prelegal position of ?E*. As for Tree' E = T_ i+1 , it holds for the same reason as in 

the previous case. 

15 With vi , . . . , V/, here and in later cases being as in the corresponding clause of the description of LOOP. 
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Clause (b): If the ith iteration of LOOP deals with Case (i), (ii) or (iii), it is the environment who moves 
in the antecedent of — > and does so before the machine makes any moves. Therefore the clean 

environment assumption, with the induction hypothesis for clause (g) in mind, guarantees that is a 

legal and hence prelegal position of ??£"*. Assume now that the ith iteration of LOOP deals with Case (iv), 
so that ^i+i = (^i, -Lvi.^.a, . . . , A-Vk-v k .a). By the induction hypothesis, ^ is a prelegal position of 
And, by the induction hypothesis for clause (d), each Vj (1 < j < k) is a leaf of Tree^ E (^i), so adding the 
(lab)moves Lvi.v_ 1 .a 1 . . . , A-Vk-v_ k does not bring to a non-prelegal position, ^i+i thus remains a prelegal 
position of As an aside, note also that those moves, being nonreplicative, do not modify Tree E (^i). 

Clause (c): Just as in the previous clause, when the ith iteration of LOOP deals with Case (i), (ii) or 
(iii), the desired conclusion follows from the clean environment assumption in conjunction with the induction 
hypothesis for clause (g). Assume now that the ith iteration of LOOP deals with Case (iv). Consider any leaf 
x of Tree^ E As noted at the end of our proof of Clause (b), we have Tree^ E {^i) — Tree^ E 

so x is also a leaf of Tree^ E (^i). Therefore, if = ^ff x , the conclusion that is a prelegal 

position of follows from the induction hypothesis. Suppose now ^ ^f X - Note that then, in 

view of the induction hypothesis for clause (d), looks like (^~ x , -Lj/i.a, . . . , _Ly m .a), where for each yj 

(1 < j < m) we have z — x and z = yj for some leaf z of Tj, with yj being a leaf of Tree' E (\I , ^ X ). By the 
induction hypothesis for the present clause, ^~ x is a prelegal position of fE*. Adding to such a position 
the nonreplicative labmoves -Lyi-a, . . . , \-y m .a — where the yj are leaves of Tree' E (\^ x ) — cannot bring 
it to a non-prelegal position. Thus, v E'^|f 1 remains a prelegal position of ?E* . 

Clauses (d) and (e): If the ith iteration of LOOP deals with Cases (iii) or (iv), Tj is not modified, and 
no moves of the form x: or x.y: (where x,y are bitstrings) are made in the antecedent of — > so 
Tree^ E (>3/j} and Tree^ E {^f X ) (any leaf x of Tree^ E v&j) arc not affected, either. Hence Clauses (d) and 
(e) for i + 1 are automatically inherited from the induction hypothesis for these clauses. This inheritance 
also takes place — even if no longer "automatically" — when the ith iteration of LOOP deals with Case (i) 
or (ii) . This can be verified by a routine analysis of how Cases (i) and (ii) modify T t and the other relevant 
parameters. Details are left to the reader. 

Clause (f): Consider any leaf z of T i+ i. When the ith iteration of LOOP deals with Case (i) or (ii), no 
moves of the form x.a are made in the consequent of — > ?_E*, and no moves of the form x.y. a are 
made in the antecedent (any bitstrings x, y). Based on this, it is easy to see that for all bitstrings x,y we 
have $^f x = <&f x and (^E'^f 1 )- J/ = {^f x )- v ■ Hence clause (f) for i + 1 is inherited from the same clause for 
i. Now suppose the ith iteration of LOOP deals with Case (iii). Then T i+1 = and hence z is also a leaf 
of Ti. From the description of Case (iii) one can easily see that if w ^ ~z or u ^ z, wc have = ^ and 
= so tne equation = is true by the induction hypothesis; and if w < z 

and u < z, then = (<S>f-,Ta) and (*^)- 2 = ((ffj-^Ta). But, by the induction hypothesis, 

= (^j- 2 )--. Hence — A similar argument applies when the ith iteration of LOOP deals 

with Case (iv). 

Clause (g): Below we implicitly rely on the induction hypothesis, according to which 6^ G Lr' ' 

p ri* QQ rp* 

and hence <f>i G Lr' and ^ e Lr' 1 . Note that, with the clean environment assumption in mind, all 
of the moves made in any of Cases (i)-(iv) of LOOP have the prefix T.' or '2.', i.e. are made either in the 
antecedent or the consequent of — ► fE*. Hence, in order to show that Oi+i is a legal position of 
??£* fE*, it would suffice to verify that $ m G Lr 9£ * and G Lr 9<fE \ 

Suppose the ith iteration of LOOP deals with Case (i) or (ii). The clean environment assumption 
guarantees that ^i+i G Lr ??£; . In the consequent of — ► f E* only replicative moves are made. 
Replicative moves can yield an illegal position ($i+i in our case) of a ?-game only if they yield a non- 
prelegal position. But, by clause (a), is a prelegal position offE*. Hence it is also a legal position of 
?£*. 

Suppose now the ith iteration of LOOP deals with Case (iii). Again, that vE^+i G Lr ??B is guaranteed by 
the clean environment assumption. So, we only need to verify that <&i + i G Lr ?B . By clause (a), this position 
is a prelegal position of fE*. So, it remains to sec that, for any leaf y of Tree fE g Lr E . Pick 

an arbitrary leaf y of Tree ?E — i.e., by clause (a), of T i+1 . Let z be the leaf of T i+1 with y = ~z. 
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We already know that "J/j+i G Lr 99£; . By clause (d), we also know that z is a leaf of Tree^ E 
Consequently, € Lr 9£; . Again by clause (d), z is a leaf of Tre€ E (*^ z 1 ). Hence, (*^ z 1 )-- should be 

a legal position of E*. But, by clause (f), $j~ = Thus, G Lr B *, i.e. G Lr B *. 

Finally, suppose the ith iteration of LOOP deals with Case (iv) . By the clean environment assumption, 
3>i+i G Lr 9£ . Now consider This position is a prelegal position of ??£?* by clause (b). So, in order 

for "J/i+i to be a legal position of for every leaf x of Tree^ E ('J/j+i) we should have G Lr 9B . 

Consider an arbitrary such leaf x. By clause (c), is a prelegal position of fE*. Hence, a sufficient 

condition for G Lr 9s * is that, for every leaf y of Tree 9£; * (W^), G Lr £ *. So, let y be an 

arbitrary such leaf. By clause (e), there is a leaf z of Tj+i such that "z = a; and z = y. Therefore, by clause 
(f), = But wc know that G Lr 9£; * and hence (with clause (a) in mind) $^ G Lr B *. 

Consequently, (*^ x 1 )- !/ G Lr E \ □ 

Lemma 12.28 For every finite initial segment T of 9, there is i G N such that T is a (not necessarily 
proper) initial segment of 0j and hence of every Qj with i < j G N. 

Proof. The statement of the lemma is straightforward when there are infinitely many iterations of 
LOOP, for each iteration adds a nonzero number of new moves to the run and hence there are arbitrarily 
long OiS, each of them being an initial segment of 9. Suppose now LOOP is iterated a finite number m of 
times. It would be (necessary and) sufficient to verify that in this case 6 = O m , i.e. no moves are made 
during the last iteration of LOOP. But this is indeed so. From the description of LOOP we see that the 
machine does not make any moves during a given iteration unless the environment makes a move 7 first. 
So, assume _L makes move 7 during the mth iteration of LOOP. By the clean environment assumption, wc 
should have (9 TO , T7} G Lr" E ^"' E . It is easy to see that such a 7 would have to satisfy the conditions of 
one of the Cases (i)-(iv) of LOOP. But then there would be an (m + l)th iteration of LOOP, contradicting 
out assumption that there are only m iterations. □ 

Let us use \& and <& to denote -i© 1, and O 2 -, respectively. Of course, the statement of Lemma 12.28 is 
true for $ and ^ (instead of 9) as well. Taking into account that, by definition, a given run is legal iff 
all of its finite initial segments are legal, the following fact is an immediate corollary of Lemmas 12.28 and 
12.27(g): 

9 G Lr" E "^ ?E ' . Hence, * G Lr" £ * and $ G Lr ?B * . (12) 
To complete our proof of Lemma 12.20, we need to show that 

Wn ??F - ?B '(e)=T. 

With (12) in mind, if Wn ??F (*) = _L, by the definition of -►, we are done. Assume now Wn ??F ($) = T. 
Then, by the definition of ?, there is a complete branch x of Tree" E * (*) such that Wn ?£ * {^- x } = T. This, 
in turn, means that, for some complete branch y of Tree E 

Wn £ '((f^)^)=T. (13) 

Fix these x and y. For each i G N, let Xi denote the (obviously unique) leaf of Tree^ E (^>i) such that 
Xi ;f! x\ and let yi denote the (again unique) leaf of Tree {^^ Xi ) such that yi ;< y. Next, let Zi denote the 
leaf of Ti with — Xi and Zj t = yi. According to Lemma 12.27(e), such a Zi exists and is unique. 

Consider any i with illeJV. Clearly Xi ^ x i+i and y^ ^ yi+i- By our choice of the Zj, we then have 
Zi ^> Zi+i and z± ^ z i+1 . Hence, by Lemma 12.26, -< Zj+i. Let us fix z as the shortest (perhaps infinite if 
N is infinite) colored bitstring such that for every i G N , Zi < z. Based on the just-made observation that 
we always have Zi < z i+ i, such a z exists. And, in view of Lemma 12.27(a), it is not hard to see that I is a 
complete branch of Tree' E ($). 

With Lemma 12.28 in mind, Lemma 12.27(f) easily allows us to find that = (ty- x )- y . Therefore, by 
(13), Wn E ' = T. By the definition of ?, this means that Wn ?£ * ($} = T. Hence, by the definition of 

-» and with (12) in mind, Wn ??£%?,! "(9) = T. Done. 
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12.5 Finishing the soundness proof for afRne logic 

Now we are ready to prove Theorem 11.1. Consider an arbitrary sequent S provable in AL. By induction 
on the AL-derivation of S, we are going to show that S has a uniform solution £ . This is sufficient to 
conclude that AL is 'uniformly sound'. The theorem also claims 'constructive soundness', i.e. that such an 
£ can be effectively built from a given AL-derivation of S. This claim of the theorem will be automatically 
taken care of by the fact that our proof of the existence of £ is constructive: all of the uniform-validity and 
closure lemmas on which we rely provide a way for actually constructing a corresponding uniform solution. 
With this remark in mind and for the considerations of readability, in what follows we only talk about 
uniform validity without explicitly mentioning uniform solutions for the corresponding formulas/sequents 
and without explicitly showing how to construct such solutions. 

There are 16 cases to consider, corresponding to the 16 possible rules that might have been used at 
the last step of an AL-derivation of S, with S being the conclusion of the rule. In each non-axiom case 
below, "induction hypothesis" means the assumption that the premise(s) of the corresponding rule is (are) 
uniformly valid. The goal in each case is to show that the conclusion of the rule is also uniformly valid. 
"Modus ponens" should be understood as Lemma 12.8, "generalized modus ponens" as Lemma 12.9, and 
"transitivity" as Lemma 12.10. Also, clauses (f) and (g) of Lemma 12.1, in combination with modus ponens, 
always allow us to rewrite a statement UrGi V H_ V G2 as UrGi V (H ) V G2, and vice versa. We will often 
explicitly or implicitly rely on this fact, which we call associativity (of V). 

Identity Axiom: By Lemma 12.1(a). 

T- Axiom: Of course, U-T. 

Exchange: By Lemma 12.1(b), V F -> F V E. And, by Lemma 12.1(e), 

Vh(E VF -> F V E) -» (GV E V F V GV F V E V H). 
Hence, by modus ponens, 

«K?V EV FV GV fV £V H. 
But, by the induction hypothesis, UrG V E V F V H. Hence, by modus ponens, UK? V F V E V H. 

Weakening: Similar to the previous case, using Lemma 12.1 (i) instead of Lemma 12.1(b). 

Y-Contraction: By Lemma 12.1(e) (with empty 5), 

fr{YE V IE -> YE) -> (G V YE V YE -» G V YE). 

And, by Lemma 12.17, HrYE V YE -> YE. Hence, by modus ponens, UK? V YE V YE ->• G V YE. But, by the 
induction hypothesis, UrG V YE V YE. Hence, by modus ponens, UrG V YE. 

?-Contraction: Similar to Y-contraction, using Lemma 12.18 instead of Lemma 12.17. 

□-Introduction: By Lemma 12.1(j), HrEi -»£iU...U E n ; and, by Lemma 12.1(e), 

Vh(E t -> E 1 U . . . U E n ) -> (G V Et -> G V (E 1 U . . . U E n )) . 

Modus ponens yields UK? V G V {Ex U . . . U E n ). But, by the induction hypothesis, UK? V E t . So, by 

modus ponens, UrG V (Ei U . . .U E n ). 

n-Introduction: By the induction hypothesis, 

hGVfli, IK? V E n . 

And, from Lemma 12.1(k), 

t-(G V Ei) A ... A (G V E n ) —> G\/ (Ei n . . . n E n ). 
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Generalized modus ponens yields hGV (E\ n . . . I~l E n ). 

V-Introduction: In view of associativity, this rule is trivial. 
A-Introduction: By the induction hypothesis, 

Id - G\ V E\, . . . , ^rG n V E n . 

And, from Lemma 12.1(d), 

H-(Gi V Ei) A ... A (G-ji V £■„) — > Gi V . . . V G_a V (i?i A ... A E n ). 

Generalized modus ponens yields l-Gi V ... V Gn V (£1 A . . . A E n ). 

Y-Introduction: By the induction hypothesis, hGV £7. And, by Lemma 12.11, t~E — > Y-E. So, by 
Lemma 12.1(e) and modus ponens applied twice, U-G V YE. 

?-Introduction: Similar to Y-introduction, using Lemma 12.12 instead of Lemma 12.11. 

A-Introduction: By the induction hypothesis, IFYG V E. If YG is empty, then YG V E = E and thus 
VhE. Hence, by Lemma 12.5, VhkE, i.e. IhYG V kE. Suppose now YG is not empty. Associativity allows us 
to rewrite IFYG V E as ( HYG ) V E and thus) I — iYG E. Then, by Lemma 12.5, FA(^Y G -> E). From 
here, by Lemma 12.13 and modus ponens, we get j-A^YG — > kE, which can be rewritten as IF YYG V kE. 
But, by Lemma 12.15, FYYG -> YYG and, by Lemma 12.1(e), 

HYYG -> YYG) -» (YYG V A£ -> YYG V A£). 

Applying modus ponens twice yields M- YYG vAi?. From here, using Lemmas 12.19, 12.1(e) and modus ponens 
as many times as the number of disjuncts in YYG, we get BFYG V kE. 

o-Introduction: Similar to A-introduction, using Lemmas 12.6, 12.14, 12.16 and 12.20 instead of Lem- 
mas 12.5, 12.13, 12.15 and 12.19, respectively. 

□-Introduction: By Lemma 12.22, HrE(t) -> LixE(x). And, by Lemma 12.1(e), 

!-(£(*) -» ^xE(x)) (G V E(t) G V Ua;B(j!)). 

Modus ponens yields hGV£(i) -*■ G V Ua; J B(a;). But, by the induction hypothesis, HKG V E{t). Hence, by 
modus ponens, U-G V Ua;E(a;). 

ri-Introduction: First, consider the case when G is nonempty. By the induction hypothesis, we have 
UrGy E(y), which can be rewritten as I — <G_ — > E(y). Therefore, by Lemma 12.7, IH~ny(-iG — > E(yj) and, by 
Lemma 12.21 and modus ponens, W— 1 Ij/ - >G — > \~~\yE(y). At the same time, by Lemma 12.23, IN — >G — > Fly-iG. 
By transitivity, we then get Id — ^G — > rij/£ , (j/). But, by Lemma 12.24, l-ny.E(y) rixi?(x). Transitivity 
yields I — 'G_ — > rix_E(a;), which can be rewritten as H-G V rixE(a;). The case when G is empty is simpler, 
for then H-GV rixi?(x), i.e. frV~\xE(x), can be obtained directly from the induction hypothesis by Lemmas 
12.7, 12.24 and modus ponens. 

13 What could be next? 

As a conclusive remark, the author wants to point out that the story told in this chapter was, in fact, only 
about the tip of the iceberg. Even though the phrase "the language of CL" was used in some semiformal 
contexts, such a language has no official boundaries and, depending on particular needs or taste, remains 
open to various interesting extensions. In a broad sense, CL is not a particular syntactic system or a 
particular semantics for a particular collection of operators, but rather a platform and ambitious program 
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for redeveloping logic as a formal theory of computability, as opposed to the formal theory of truth which it 
has more traditionally been. 

The general framework of CL is also ready to accommodate any reasonable weakening modifications of 
its absolute-strength computation model HPM, thus keeping a way open for studying logics of sub- Turing 
computability and developing a systematic theory of interactive complexity. Among modifications of this 
sort, for example, might be depriving the HPM of its infinite work tape, leaving in its place just a write-only 
buffer where the machine constructs its moves. In such a modification the exact type of read access to 
the run and valuation tapes becomes relevant, and a reasonable restriction would apparently be to allow 
- perhaps now multiple — read heads to move only in one direction. An approach favoring this sort of 
machines would try to model Turing (unlimited) or sub- Turing (limited) computational resources such as 
memory, time, etc. as games, and then understand computing a problem A with resources represented by R 
as computing R — > A, thus making explicit not only trans- Turing (incomputable) resources as we have been 
doing in this paper, but also all of the Turing/sub- Turing resources needed or allowed for computing A — the 
resources that the ordinary HPM or Turing machine models take for granted. So, with T representing the 
infinite read/write tape as a computational resource, computability of A in the old sense would mean nothing 
but computability of T — > A in the new sense: having T in the antecedent would amount to having infinite 
memory, only this time provided externally (by the environment) via the run tape rather than internally via 
the work tape. 

Complexity and sub- Turing computability aside, there are also good philosophical reasons for questioning 
the legitimacy of the presence of an infinite work tape, whether it be in our HPM model or in the ordinary 
Turing machine (TM) model. The point is that neither HPMs nor TMs can be implemented — even in 
principle — as actual physical beings. This is so for the simple reason that no real mechanical device will 
ever have an infinite (even if only potentially so) internal memory. The reason why this fact does not cause 
much frustration and usually remains unnoticed is that the tape can be easily thought of as an external 
resource, and thus TMs or HPMs can be identified only with their finite control parts; then and only then, 
they indeed become implementable devices. Yet, the standard formal treatment of TMs or our treatment of 
HPMs does not account for this implicit intuition, and views the infinite work tape as a part of the machine. 
Computability logic, with its flexibility and ability to keep an accurate and explicit count of all resources, 
makes it possible to painlessly switch from TMs or HPMs to truly finite devices, and make things really 
what they were meant to be. 

An alternative or parallel direction for CL to evolve with a focus shift from computability to complexity, 
could be extending its vocabulary with complexity-conscious operators. For example, winning a complexity- 
conscious version VYxVA p yA{x, y) of \~\xUyA(x,y) could mean existence of a polynomial-time function / 
such that, to any move m by the environment, the machine responds with a move n within time /(to), and 
then wins the game A(m,n). 

Time has not yet matured for seriously addressing complexity or sub- Turing computability issues though, 
and in the nearest future CL will probably remain focused on just computability: as it happens, there are still 
too many unanswered questions here. The most important and immediate task is finding axiomatizations 
for incrementally expressive fragments of CL — first of all, fragments that involve recurrence operators, 
for which practically no progress has been made so far (with the intuitionistic fragment of CL being one 
modest exception). It is also highly desirable to fully translate CL4-style ad hoc axiomatizations into some 
systematic and "nice" proof theory, such as cirquent calculus. So far this has only been done (in [16, 23]) 
for the -i, A, V-fragmcnt. 
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